---
sourceDocument: Brazil Release Notes
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/release-notes

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Release Notes

ft:clusterId :

    - rn

bundleId :

    - rn


---

# Brazil security and notable fixes

# Brazil security and notable fixes {#ariaid-title1}

Release version: Brazil  
Updated September 24, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 106 minutes to read  
The Brazil release contains important problem fixes.

Brazil was released on September 24, 2026.
:
    * 09-22-2026_1636
    * glide-brazil-08-25-2026__patch0-08-26-2026
    {#brazil-security-notables__ul_xyc_f1r_fcc}
Important:  
For more information about how to upgrade an instance, see [ServiceNow upgrades](https://servicenow-prod.fluidtopics.net/l0_vqSZx_DzaOy3rRCBXrQ "The upgrade process moves your instance to a new ServiceNow release version. Understand the difference between upgrading and patching, release definitions, rollback and backup options, and how to test your non-production and production instance upgrades.").

For more information about the release cycle, see the [ServiceNow Release Cycle](https://support.servicenow.com/kb_view.do?sysparm_article=KB0547244).{#brazil-security-notables__p_download-version}  
Note:  
This version is being evaluated for use in the ServiceNow Government Community Cloud (GCC) environment. For a downloadable, sortable version of the fixed problems in this release, click [here](https://downloads.docs.servicenow.com/enus/brazil/rn/patches/PRBs-B00.00.xlsx).

## Security-related fixes {#brazil-security-notables__security-related-fixes}

Brazil includes fixes for security-related problems that affected certain ServiceNow® applications and the ServiceNow AI Platform®. We recommend that customers upgrade to this release for the most secure and up-to-date features. For more details on security problems fixed in Brazil, refer to [KB3154282](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3154282).

## Notable fixes {#brazil-security-notables__section_avp_nmy_vfc}

The following problems and their fixes are ordered by potential impact to customers, starting with the most significant fixes.
{#brazil-security-notables__notable-fixes__entry__4}

| Problem | Short description | Description | Steps to reproduce |
|-|-|-|-|
| Access Analysis Instrumentation API PRB1984283 | Analyze Access in any record's hamburger menu isn't working | Adding 'access-management' into the URL doesn't work either; it navigates to Access Analyzer's 'Analyze Permissions'. |   |
| Access Control PRB1981898 | Need properties for better control of the scope where a security attribute script gets evaluated |   |   |
| Activity Stream PRB1971849 | The acronym 'AI' needs to be localized in some target languages | This issue was observed in instances using the languages Spanish, Portuguese Brazilian, or French. | 1. Switch the instance language to either Spanish, Portuguese Brazilian, or French. 2. Navigate to the Hardware Asset Workspace. 3. Open the Hardware Asset Workspace Overview. 4. Select Asset requests under the 'Quick links' section. 5. Open any Requested Item. {#brazil-security-notables__ol_ws3_dsj_lkc} Expected behavior: The acronym 'AI' should be localized in the target languages Spanish, Brazilian Portuguese, and French. This should also apply to the backend form of the Requested Item's 'Detailed Issue' description. Actual behavior: Observe that the 'AI' acronym still appears as 'AI' instead of 'IA'. |
| Activity Stream PRB1991852 | Base64 coded attachments can't be loaded in the activity stream in the workspace | This likely has to do with processing large content. | 1. Navigate to any record page. 2. Create an email with a base64 encoded image. 3. Set the email to 'sent' status. 4. Navigate to the record and select Show more for the email. {#brazil-security-notables__ol_xq3_dsj_lkc} Expected behavior: The full body of the email is displayed. Actual behavior: The email is loading for a long time and eventually crashes the page. |
| Activity Stream PRB2011631 [KB2974503](https://hi.service-now.com/kb_view.do?sysparm_article=KB2974503) | The 'Additional comments' left side black indicator bar disappears after a page refresh |   | Refer to the listed KB article for details. |
| Activity Stream PRB2016617 | Unguarded Jelly expression in form.xml causes RhinoEcmaError warnings on every classic form load | On any classic UI16 form load, the platform Jelly template evaluator throws a RhinoEcmaError warning in the system log. The warning is present on every classic form, regardless of application scope or record type. There is no functional outage; forms load and save correctly, and all transactions return HTTP 200 with normal response times. The main impact is high-volume system log noise. | 1. Log in to a Zurich instance. 2. Open any classic UI16 form record without a sysparam_citation query parameter in the URL. * Example without activity stream: Navigate to /sys_dictionary.do and open any record. * Example with activity stream: Navigate to /incident.do and open any record. {#brazil-security-notables__ul_qq3_dsj_lkc} 3. After the form loads, open the system log. {#brazil-security-notables__ol_pq3_dsj_lkc} Expected behavior: No RhinoEcmaError warnings are generated during a standard form load. Actual behavior: On forms without an activity stream, one warning entry is generated per form load. On forms with an activity stream, two warning entries are generated per form load. |
| Activity Stream PRB2018914 | In an activity stream, video controls become unusable after selecting an attached video | After a video file is uploaded as an attachment to a record and the page is refreshed, the video renders inside the activity stream with native HTML5 video controls (play/pause, scrubber, volume, fullscreen). However, on selecting the video element, the controls disappear and become unusable, preventing the user from playing back, scrubbing, or otherwise interacting with the video. | 1. Log in to a ServiceNow instance. 2. Open any task record that supports an activity stream and an Attachments field. 3. Attach a video file to the record. 4. Save the record. 5. Refresh the page so the attached video renders inside the activity stream. 6. In the activity stream, locate the entry containing the attached video. The video element appears with native video controls (play/pause, scrubber, volume, fullscreen). 7. Select the video element in the activity stream to attempt playback or interact with the controls. {#brazil-security-notables__ol_gr3_dsj_lkc} Expected behavior: The native video controls remain visible and interactive; the user can play, pause, scrub, adjust volume, and enter fullscreen. Actual behavior: On selection, the video controls disappear and become unusable. The video element renders but no playback controls can be interacted with. |
| Activity Stream PRB2032224 | Orphaned Dependent fields in the initial audit event causes an exception in SysAuditRule | When the support audit is passed to findFirst, which filters out support audits, it finds an empty stream and throws 'IllegalStateException: Unreachable code reached.' The exception is caught, but it causes retrieveEvents to return zero events, leaving the workspace activity stream completely empty. |   |
| Activity Stream PRB2066570 | Activity stream primary journal field ordering regression --- work_notes displayed before comments in UI16 and Service Portal | The activity stream on task records (Incidents, Changes, etc.) incorrectly defaults to the 'Work Notes' input instead of 'Comments' in both the platform UI and Service Portal. This affects user workflow as agents may inadvertently post internal work notes when intending to post customer-visible comments. Additionally, custom journal fields configured on tables do not appear in the Service Portal activity stream widget. |   |
| Advanced Work Assignment PRB1969415 | Javascript Error Logs on Advanced Work Assignment despite AWA not being in use | In sysevent_​script_​action_​5054795a9f946210c89656effa0a1cda,​ if the user is not found in the instance, an error is thrown. |   |
| Agent Chat PRB1683554 | Conversation tab doesn't show up during an outbound call from Amazon Connect | The interaction pops open in agent workspace, but the conversation tab doesn't show. It only shows up on refresh or reload of the page. | 1. Make an outbound call from the agent workspace using the Amazon Connect. 2. Select the Set Up Real Time Transcription checkbox in the instance setup step. {#brazil-security-notables__ol_et3_dsj_lkc} Observe that the interaction pops open in agent workspace, but the conversation tab does not show. It only shows up on refresh or reload of the page. |
| Agent Chat PRB1928570 | The Service Operation Workspace chat window malfunctions after dragging and dropping an image | The Service Operation Workspace chat window gets stuck after dragging and dropping an image from the chat window to the attachment section of the incident. | 1. Impersonate an agent and navigate to SOW and set state as available. 2. In other browser intiate a chat. 3. Once the chat is accepted from the agent side the interaction opens with chat window. 4. Add an image in the chat window. 5. Create an incident from the interaction using create incident. 6. Drag the image from chat window to the add attachements on the incident. {#brazil-security-notables__ol_at3_dsj_lkc} Notice that the Service Operation Workspace chat window gets stuck. |
| Agent Chat PRB2014178 | Optimize the request to fetch previous interactions for a requester to show conversation history in Agent chat | If there are no custom filters, there is no need to create the list of interaction records by going through all the returned records from the DB query. | 1. Enable the 'Conversation history' feature in Agent chat settings. 2. Set the limit to 10. 3. Ensure that there's a large number of closed interactions (more than 100) for Abel Tuter. 4. Check the server memory in /stats.do. 5. Start a new conversation as Abel Tuter. 6. Accept the work item as Beth Anglin. 7. Ensure that the history shows in the agent chat. 8. Check the server memory again in /stats.do. {#brazil-security-notables__ol_ft3_dsj_lkc} Observe that the server memory has gone up significantly. |
| Agent Chat PRB2030144 [KB3133990](https://hi.service-now.com/kb_view.do?sysparm_article=KB3133990) | When a work item is in the queue but not yet accepted, the user can't update string fields on the open record | In the workspace, when a work item is in the queue but not yet accepted, the user is unable to update string fields on the open record. With these two circumstances satisfied, a focus-stealing issue occurs, where the blinking cursor is removed after a moment. | Refer to the listed KB article for details. |
| Agile Development PRB2026219 | The Group capacity field is read only in sprint records |   | 1. Navigate to an instance. 2. Navigate to the table 'rm_sprint.list'. 3. Open any sprint record. {#brazil-security-notables__ol_sr3_dsj_lkc} Note that Group capacity (points) is read-only. |
| AI Agents (Glide Family) PRB1994390 | After a Zurich upgrade, hundreds of thousands of log entries are generated by CacheInvalidationEventHandler | The message is 'No endpoints available for cache invalidation'. The source is com.​glide.​ui.​Servlet​Error​Listener.​ |   |
| AI Agents (Glide Family) PRB2025974 | A user session is logged out when opening AI-generated interaction records | The user session is logged out when opening AI-generated interaction records that were created/updated by the incident_intelligence_agent. The interaction record remains in the work in progress state, even though the associated conversation has been marked as faulted. The issue is specific to the in Service Operations Workspace view, as opening the same record in platform view works without issue. |   |
| AI Search (Glide) PRB1913117 | Searcingh on a reference field with an ACL on a reference table doesn't work even with dot_walk_field mapping |   |   |
| AI Search for Service Portal PRB2038055 [KB3139447](https://hi.service-now.com/kb_view.do?sysparm_article=KB3139447) | The Now Assist Self Service widget breaks the full page experience search in portal | After upgrading to Zurich, when the user searches from the Employee Center portal, the full page experience fails and no results are displayed. Instead, the widget throws a server-side JavaScript error: '$sp is not defined'. | Refer to the listed KB article for details. |
| AI Search UX PRB1993482 | Global Search is logging the error '\*\*\* Script: No EVAM Definition ID provided as input to Build Genius Result Templates transform.: no thrown error' | A 1000+ error is observed in the console and the syslog error occurs, '\*\*\* Script: No EVAM Definition ID provided as input to Build Genius Result Templates transform.: no thrown error.'. |   |
| AI Search UX PRB2039564 [KB3118078](https://hi.service-now.com/kb_view.do?sysparm_article=KB3118078) | Error while accessing catalog items from search after Australia upgrade | After upgrading to Australia, the typeahead widget for suggested results fails. | Refer to the listed KB article for details. |
| Analytics Data API PRB1844011 | Using 'Trend by week' leads to an incorrect record count when the new year starts | When using 'Trend by' with the options 'Opened', 'Calendar', 'Standard Calendar' and 'per-week' and running the report, the record count is 3 but the List view record count is 5. |   |
| Analytics Data API PRB1973007 | The Platform Analytics 'pivot table' unit type doesn't persist | When creating a pivot table using two tables as the data sources, the 2nd and 3rd columns swap their values. | 1. Create a pivot table visualization within a dashboard. 2. Add in two tables as data sources. 3. Create four columns on the pivot table, with the first two column being a count of each respective table and the last two columns a sum of all the values with other columns. 4. Save the visualization. 5. Exit editing mode. 6. Refresh the dashboard. {#brazil-security-notables__ol_bt3_dsj_lkc} When the order of the columns is the count of table 1, count of table 2, sum of table 1's column, sum of table 2's column, and when users refresh the dashboard, the 2nd and 3rd columns values swap, with the values from column 3 appearing in column 2 and vice versa. |
| Analytics Data API PRB1974037 | Platform Analytics - Visualization displays outddated dates when 'Use current date for period end' is selected | Even when the 'Use current date for period end' is selected on a time series visualization, the graph still displays older dates and not the latest dates. | 1. Create a time series visualization with an indicator (daily frequency) as a data source. 2. Ensure that scores are collected for this indicator. 3. In the configuration, under the date range section, select the Set absolute period and Use current date for period end options. 4. Review the visualization on different days. {#brazil-security-notables__ol_ot3_dsj_lkc} Expected behavior: The visualization graph should consider the current date as the period end date and generate the graph. Actual behavior: The visualization graph is still generated with the older dates (when the visualization is created) as the period end date. |
| Analytics Data API PRB1986630 | Domain isn't included while generating a key for the indicator data source | Visualizations that use the Analytics Cache currently omit the global key when generating cache entries. As a result, a visualization may behave inconsistently across domains, depending on which domain created the cache entry first. |   |
| Analytics Data API PRB2000611 | Pivot tables for data visualizations cannot handle enough records to produce top ten charts, so the charts return no records in the Search Analyzer for Now Assist Analytics (Performance) | The error message reads, 'Unable to generate chart, maximum number of data points exceeded this visualization'. | 1. Navigate to Now Assist Admin module. 2. Select the Performance tab. 3. Select the User Search Analyzer. {#brazil-security-notables__ol_rs3_dsj_lkc} Observe that the two top charts do not have any data loaded in them. |
| Analytics Data API PRB2001019 | Accept 'group by' selection for all variable types | When comparing to classic reporting, many variable types are not available for selection in the 'group by' component in the Platform Analytics visualizations. |   |
| Analytics Data API PRB2003111 | Pivot table using multiple data sources shows 'No data' on the widget when one of the data sources returns no data | Even though data is available, the chart shows 'No data available'. | 1. Provision an instance with the com.snc.itsm_pa.demo plugin installed to have more test data. 2. Open the list with records of the problem table (problem.LIST). 3. Filter records by Assigned to = Abel Tuter and State = Assess so that two records appear. 4. Remove one of the records. 5. Move the other record to the Fix in Progress state by selecting the Fix button. 6. Navigate to AllLibraryData visualizations. 7. Select New. 8. Select Visualization type: Pivot table. 9. Specify the following data sources: * Incident table with the conditions Assigned to = Abel Tuter and State in (New, On Hold, Resolved). * Problem table with the conditions Assigned to = Abel Tuter and State in (New, Fix in Progress, Assess). {#brazil-security-notables__ul_qt3_dsj_lkc} 10. Specify group by's: * Columns: Assign to; Show all; Individual metric. * Rows: State. {#brazil-security-notables__ul_rt3_dsj_lkc} 11. Set 'Show row total' and 'Show column total' to false. 12. Check the chart. Observe that the chart renders and shows expected data. 13. Open the list with records of the problem table (problem.LIST). 14. Filter records by Assigned to = Abel Tuter and State = Fix in Progress so that one record appears. 15. Open that record. 16. Change the status to Re-Analyze. 17. Refresh the chart. {#brazil-security-notables__ol_pt3_dsj_lkc} Expected behavior: The chart is rendered and shows the expected data with zeros. Actual behavior: The chart shows 'No data available', despite data being available. |
| Analytics Export API PRB1987970 | PDF Export of Inline Dashboard gives a blank page with Loading word in it | Export PDF for any of the Inline dashboards is blank and shows the loading symbol only in the PDF and not the actual report of the dashboard. Also, Exporting a Dashboard stays in the 'Export request in progress' state for a very long time even on a very simple one widget dashboard. |   |
| Analytics Export API PRB1995410 [KB2810683](https://hi.service-now.com/kb_view.do?sysparm_article=KB2810683) | On demand list visualization export to .xlsx | An issue has been identified where on‑demand exports of list data visualizations intended for XLSX format are instead exported as XLS files in the Zurich environment. This behavior differs from the Yokohama environment, which previously exported successfully in XLSX format. | Refer to the listed KB article for details. |
| Analytics Export API PRB2007025 | Dashboard PDF export doesn't apply dashboard filters on the list | Dashboard filters aren't applied to the list in the dashboard PDF exports. Only the filters configured in the list are honored. | 1. Export a dashboard to PDF with list visualization. 2. Make sure the dashboard has dashboard filters and the list is following the filters. {#brazil-security-notables__ol_ts3_dsj_lkc} Observe that the filters are applied correctly on the dashboard to the list, but they aren't applied in the exported PDF. |
| Application Manager PRB1889269 | Progress worker state isn't set to complete after worker is finished | Installing plugins shows an error even when successfully completed. In the logs, it looks like the error comes from a script include. Previously, the code block was a part of a larger function that had appVersion and appID as parameters. The code was refactored into the forceSyncWithStore function, which doesn't have appVersion and appID as parameters. If the gs.info line is reached, it throws an error because those two fields were not passed into the function. | 1. Install the custom scoped app (for example, x_conym_atf_sc_req, x_conym_hrp). 2. Check 'sys_upgrade_history' to confirm the installation is marked as 'complete'. 3. Check 'sys_progress_worker' list for the message 'Progress worker state is not set to complete after worker is finished.' 4. Check 'syslog' for the error 'com.glide.script.RhinoEcmaError: 'appVersion' is not defined.'. {#brazil-security-notables__ol_lq3_dsj_lkc} |
| Application Manager PRB1971605 | The base version is greyed out in the new Application Manager | The base version is greyed out in the new Application Manager, which stops to install the custom version created on the base version 1.0.0. The new Application Manager allows to install the custom version only on the latest version. |   |
| Application Manager PRB1971790 [KB2827137](https://hi.service-now.com/kb_view.do?sysparm_article=KB2827137) | The size of the cache string is over 33.55MB, the GAAA response is too large to save as attachment | Post-release of killing entitlements, the large get_all_available_apps (GAAA) response is breaking the checkAvailableUpdates call in the UpdateChecker. Until the get_all_available_apps response size is reduced below the \~32MiB limit, the App Manager will continue to have cache issues. | Refer to the listed KB article for details. |
| Application Manager PRB1980407 [KB2715943](https://hi.service-now.com/kb_view.do?sysparm_article=KB2715943) | In Application Manager, version details for intermediate versions don't refresh and are stuck loading | In Zurich instances, Application Manager fails to display version details when selecting any middle version between the installed and latest version for an app/plugin. The main details panel either shows no data or remains stuck loading and doesn't refresh. | Refer to the listed KB article for details. |
| Application Manager PRB1981044 [KB2719949](https://hi.service-now.com/kb_view.do?sysparm_article=KB2719949) | The latest version in the sys_store_app table is updated to the installed version after an install, thereby causing the Upgrade button to be unavailable in App Manager | Two functions (_​fix​Latest​Version​For​Withdrawn​Installed​Apps,​ _​fix​Latest​Version​For​Withdrawn​Installed​Customizations)​ in Application Manager's Update​Checker.​check​Available​Updates API (aka Sync in the UI) were missing a required GlideRecord.addQuery constraint when the 'sn_​appclient.​enable_​app_​manager_​checksums_​cache' sys_property was set to true (default). This issue led to the latest_version being set to the incorrect values on Install/Sync. | Refer to the listed KB article for details. |
| Application Manager PRB1988027 | Application Manager fails to load Connected Workplace app info page with 'App info not found' error | In the Application Manager, the Connected Workplace app fails to load its information page when accessed from the Updates tab. The page spins for several minutes and then displays 'App info not found / Record not found', preventing the user from updating the app via the UI. |   |
| Application Manager PRB1992835 [KB2804238](https://hi.service-now.com/kb_view.do?sysparm_article=KB2804238) | A deprecated Classic App Manager URL causes issues on some instances | Users have access to the Classic App Manager by navigating to the URI '/$allappsmgmt.do'. When they switched to new app manager later, and load the 'My company applications' page, that can corrupt the App Manager checksum cache, which causes the manual sync to fail. | Refer to the listed KB article for details. |
| Application Manager PRB2057729 [KB3140027](https://hi.service-now.com/kb_view.do?sysparm_article=KB3140027) | Users can't publish custom-scoped applications after upgrading to Zurich or Australia | After upgrading to Zurich or Australia, there's an issue that prevents new application versions from being published for custom scoped apps in ServiceNow Studio. Selecting the Publish button for any custom application results in a publish failure with one of the following errors: 'Vendor information was not found, upload function is disabled for this instance' or 'Did not receive publishing information successfully. Cannot read properties of undefined (reading 'toString')'. | Refer to the listed KB article for details. |
| Application Navigator PRB2041444 [KB3140871](https://hi.service-now.com/kb_view.do?sysparm_article=KB3140871) | Tooltips persist and fail to dismiss on Chromium v149+ browsers | For users on UI16, there are recent updates to Chromium (specifically version 149.x) that trigger performance issues in UI16. This causes tooltips to remain stuck on the screen after a user hovers their cursor then moves away from elements. The tooltips should disappear once the user moves the cursor off the element. | Refer to the listed KB article for details. |
| Application Rationalization PRB1993865 | Base instance business rule fails to exclude the current record during duplicate name validation due to incorrect property reference | The business rule on the cmdb_ci_business_app table incorrectly blocks updates when changing the case of a Business Application name (for example, 'abc' to 'ABC'). This happens because it uses current.sysId instead of current.sys_id, resulting in an undefined sys_id comparison. | 1. Create a Business Application (cmdb_ci_business_app) with the name 'abc'. 2. Edit the same Business Application and change the name to 'ABC' (only change the case). 3. Attempt to save the record. {#brazil-security-notables__ol_kr3_dsj_lkc} Expected behavior: The save is allowed because it's the same record, just with a different case. Actual behavior: The save is blocked with the error: 'A Business Application exists with the same name. Please verify.'. |
| App Shells PRB2005043 | Some items are hidden behind the company logo in the Next Experience navigation bar | Sometimes the Next Experience navigation isn't rendered correctly. The 'All' and 'Favorites' items are displayed behind the ServiceNow logo. The issue is happening is randomly for some tests and does not have a fixed reproducible behavior. The menu items should always be rendered correctly and must be clickable. |   |
| Attachments to Records PRB2018059 | GlideSysAttachment. writeContentStream() fails in the Scripted REST API in Australia | GlideSysAttachment(). writeContentStream() fails with 'Can't find method com.glide.ui. SysAttachment. writeContentStream (object,string,string,com. glide.communications. GlideScriptableInputStream)' when called from a Scripted REST API in the Australia release. The issue is not present in Zurich. |   |
| Audit History PRB2019035 | The sysID of sn_nowassist_skill_config is displayed in the username of the work notes | This issue is observed only in Workspace. In UI16, it's working fine. | 1. Make a GenAI Skill call. 2. After the GenAI Skill call, update any record. {#brazil-security-notables__ol_es3_dsj_lkc} Observe that the sysID of sn_nowassist_skill_config is displayed in the username of the work notes, but it shouldn't be. |
| Authentication Factors PRB2006510 | The 'Soft Pin Enrollment' option (on the left panel menu and profile page) shouldn't appear for all users by default | The 'Soft Pin Enroll' page is accessible by all users, with no role requirement. However, it should be displayed when AI Voice Agents are installed and controlled by a property. |   |
| Authentication PRB1900411 | Login page performance lag on Chrome browser (Windows laptop) | Performance lag on the new login page on a Windows laptop using the Chrome browser. | 1. Use a Windows laptop. 2. Open Chrome browser (137.0.7151.56 (Official Build) (64-bit)). 3. Navigate to the login page. {#brazil-security-notables__ol_ht3_dsj_lkc} Observe the lag in rendering or responsiveness compared to Microsoft Edge browser on the same machine, or a previous version (Zurich) vs current version (Xanadu). |
| Authentication PRB1969882 [KB2718536](https://hi.service-now.com/kb_view.do?sysparm_article=KB2718536) | Login screen performance issues on iOS 26.2 RC and in Zurich instances | After upgrading to iOS 26.2, users are unable to log in to any instance using the Now Mobile app. The login page is extremely slow or unresponsive, and it can fail to load or accept credentials. The issue affects multiple users and device models. It's reproducible across different instances, and it also impacts the Agent app. | 1. On iOS, navigate to the Now Mobile app. 2. Connect to a Zurich or later family release instance. {#brazil-security-notables__ol_nq3_dsj_lkc} Observe that the screen loads slowly and is non-responsive. |
| Authentication PRB2029440 [KB3071161](https://hi.service-now.com/kb_view.do?sysparm_article=KB3071161) | side_door.do changes are introduced after an Australia upgrade | Some users reported that after upgrading to Australia, when SSO is enabled, the side_door.do page no longer works to allow local logins. Previously, in Zurich, even with auto-redirect enabled, accessing /side_door.do still allowed users to access the local login page. | Refer to the listed KB article for details. |
| Automated Test Framework (ATF) PRB1997825 [KB2806020](https://hi.service-now.com/kb_view.do?sysparm_article=KB2806020) | When the 'glide.​script.​block.​client.​globals' property is set to false, running an ATF test throws a client error with code coverage enabled |   | Refer to the listed KB article for details. |
| Automated Test Framework (ATF) PRB2038798 | Cannot read the properties of the undefined (reading 'message') after upgrading to Australia | The sys_​processor_​0af16f2d5363101034d1ddeeff7b12b6.​xml redirects requests to a new UI page, but this new UI page introduced in the Australia release is not supported by ATF's 'Navigate to module' step because it is relying on the gsft_main to load the g_form on the page. This breaks the custom logic to get the g_form on the page, and errors occur in the console. |   |
| Benchmarks PRB1989154 | Benchmark​Client​Util.​construct​Payload fails to fetch data for Global-scope PA Scorecards | Running the background script shows that the PAScorecard.query() does not return results for Global-scope indicators, causing constructPayload to fail. For benchmarked indicators that exist in the Global scope, the constructPayload method fails to fetch PAScorecard details and returns 'null'. Because the PAScorecard records are not retrieved, the Global-scope indicators are not included in the upload payload, and scores are not uploaded to the central instance. As a result, instances do not receive benchmark scores for these indicators. |   |
| Build Agent (Glide) PRB2002763 | Build Agent (BA) freemium install is blocked to due to hosted plugin, due to which NAFC install is incomplete | The BA trial version fails to install due to the missing hosted plugin. |   |
| Cache PRB1974175 | Error messages appear in system logs when cache flush attempts to process records that have already been deleted | Error level messages are logged when the cache flush mechanism attempts to process records that no longer exist in the database. The error occurs in a race condition scenario where: A record is inserted into sys_user_grmember and a cache flush message is queued, the record is subsequently deleted before the cache flush message is processed, and when the cache flush processor attempts to handle the message. It can't find the record and logs an error. |   |
| Case and Knowledge Management for HR Service Delivery PRB2028299 [KB3061412](https://hi.service-now.com/kb_view.do?sysparm_article=KB3061412) | In Platform Analytics, an ACL isn't letting an admin user modify or create data visualizations in dashboards or data visualizations | When editing any visualization in a dashboard with the sn_hr_er_case table as a data source, the visualization can't access its data source. As a result, metrics are turned off and can't be edited, preventing updates or modifications to the visualization. There is error: 'You don't have access to the data source used in this visualization'. | Refer to the listed KB article for details. |
| Change Management PRB2027139 | The search bar and the divider overlap when 'Items per page' is set to 48 |   | 1. Open the Create Change page. 2. Set items per page to 48. {#brazil-security-notables__ol_vs3_dsj_lkc} Expected behavior: Heading, search bar, and divider render without overlap. Actual behavior: Search bar and divider overlap the heading. |
| Change Management PRB2029102 | Manual approvers can't be added to the change and std_change_proposal due to newly enforced ACLs for related lists |   |   |
| Change Management PRB2035555 | The 'All' filter on the 'Create Change' page doesn't display all standard change templates when a template has no category or catalog | When the 'All' filter is selected for standard change templates on the 'Create Change' page, not all templates are displayed. This is because one template has no category. The null category errors the 'can category be read by user' check. |   |
| Cloud Encryption PRB1980759 | Prevent erroneous tampered DARE Properties notifications emails from being set to users | The error message, 'The tampering activities for Cloud Encryption properties have been found' is found in the logs. |   |
| Cloud Provisioning and Governance PRB1992234 | ​The catalog task State field is read-only | This is due to an ACL that looks for the 'sn_request_write' role. The user may not have this role installed. | 1. Log in to an instance. 2. Disable any custom ACLs that were created in order to bypass this change. 3. Impersonate a test user. 4. Navigate to a catalog task in an Open state. {#brazil-security-notables__ol_ms3_dsj_lkc} Observe that the State field is read-only. |
| CMDB Health Dashboard PRB2037629 | Certification audit OOMs node on large tables | On a fully-patched Zurich instance, a single CMDB data-certification audit job ('Audit for switchport') running on a glide.scheduler.worker thread retained 625 MB --- over 50% of the 1.20 GB live heap --- and tripped the GC-time heap-dump threshold (node GC-thrashing toward OOM). The audit loads the entire CI result set into memory in one pass instead of streaming it. |   |
| Column Level Encryption PRB1990541 | Attachment upload defaults to 'None' encryption module in the workspace | Attachment upload defaults to 'None' encryption module in the workspace, where as in Classic View its working as expected. |   |
| Condition Builder PRB1994536 | Condition display value for 'Class is a \<ci class\>' isn't readable | There are applications that use condition builder, such as CMDB Data Manager, where data manager admins can create policies. They need to be able to read and interpret the conditions they select and save. | 1. Navigate to the cmdb_ci list view. 2. Choose Class 'is a'Server. 3. Select Run. {#brazil-security-notables__ol_ns3_dsj_lkc} Observe that the display format of the condition is now 'Sys class path is a /!!/!2/!(/!!%'. This is not readable. |
| Condition Builder PRB1997702 | Limited number of values are shown in the 'Is one of' filter in Workspace | The filter is truncated and there's no way to check which values are configured. When the user wants to edit, it's also not possible to see all of the values. | 1. Navigate to the list view in CSM/FSM or SOW. 2. Use the list filter settings and locate a operator which has the option to be 'is one of'. 3. Add more than 10 values to the proper field. 4. Select Run. 5. After it's executed, check the filter again. {#brazil-security-notables__ol_ir3_dsj_lkc} Observe that the filter is truncated and there's no way to check which values are configured. When the user wants to edit, it's also not possible to see all of the values. |
| Configuration Management Database (CMDB) PRB1994587 | A race condition between IRE LazyWriter and Deletion Strategy causes the configuration item (CI) state to flip incorrectly | A CI's state is flipping from installed to stale during Discovery (delete strategy execution). A race condition occurred between IRE's asynchronous batch update of the last_discovered field using 'db.executeLazy()' and the execution of the Deletion Strategy. The LazyWriter delay caused the Deletion Strategy to process stale 'last_discovered' values, marking valid CIs as retired despite their presence in the payload. |   |
| Configuration Management Database (CMDB) PRB2020163 | CMDB Data Manager archive tasks and retire tasks are not being processed correctly | Archive tasks and retire tasks fail with the message: 'Error: Failed to create archive chunk.' and the retire policy CIs already associated to these tasks are not being processed. |   |
| Core UI Responsive Dashboards PRB2013831 [KB3143538](https://hi.service-now.com/kb_view.do?sysparm_article=KB3143538) | There's a dashboard layout issue after upgrading an instance to Australia | After an Australia upgrade, multiple users are reporting issues with alignments of reports in dashboards. While reports aren't missing, they are displayed vertically in dashboards. The issue is reproducible with core legacy dashboards. | Refer to the listed KB article for details. |
| Core UI Responsive Dashboards PRB2034505 [KB3085059](https://hi.service-now.com/kb_view.do?sysparm_article=KB3085059) | A Platform Analytics (PA) dashboard overview can't load any dashboards | If all of the following conditions are met, the dashboard doesn't appear on the 'All' tab of PA dashboard 'Overview' page. | Refer to the listed KB article for details. |
| Customer Service Management PRB2002976 [KB3141009](https://hi.service-now.com/kb_view.do?sysparm_article=KB3141009) | An advanced qualifier reference that uses 'current' isn't functioning as expected in CSM Workspace | Advanced reference qualifiers that rely on the 'current' object fail when templates are applied in Workspace. However, the same functionality works as expected in 'Classic UI (UI16)'. During template application in Workspace, the platform passes corrupted or incomplete serialized data to 'GlideRecordEncoder.decode()'. As a result, the current GlideRecord is returned without field values. | Refer to the listed KB article for details. |
| Database Compaction PRB1816028 | The 'Unexpected Compactor' job runs on the sys_attachment_doc table, causing an outage |   |   |
| Database Compaction PRB1993126 [KB3109620](https://hi.service-now.com/kb_view.do?sysparm_article=KB3109620) | 'Compactor' on RaptorDB creates indexes without 'CONCURRENTLY', causing widespread locks | The DB 'Compactor' job creates direct indexes on temporary tables that are linked with source tables through triggers. Once 'insert' comes in for a source table, the trigger also tries to write on a TMP table, and are blocked by the 'Create index' command. | Refer to the listed KB article for details. |
| Database Persistence - Data Access PRB1636284 | There's an inaccurate group count in a reference field with duplicate display values when results are pagenated |   |   |
| Database Persistence - Data Access PRB1984070 [KB2928335](https://hi.service-now.com/kb_view.do?sysparm_article=KB2928335) | Trend reports and dashboard show inaccurate data by week across the end of a year | On instances using a PostgreSQL database, an incorrect year reference (yearref) is returned for the non-ISO week functions sunday_week and monday_week. As a result, the column data displays trends for future dates where no actual record data exists. This issue affects reports and dashboards that group or summarize data by week across the end of a year. Reports may display an unexplained empty week in one year, a duplicated week in another, or records appearing in the incorrect annual bucket. | Refer to the listed KB article for details. |
| Database Persistence - Data Access PRB2007256 [KB2925734](https://hi.service-now.com/kb_view.do?sysparm_article=KB2925734) | The text search doesn't return results in non-English languages | After downloading language plugins and switching the system language to a non-English language, results aren't returned when the property 'glide.​db_​query.​replace_​distinct_​with_​groupby' is set to 'false.' When the language is set to English, results are returned. | Refer to the listed KB article for details. |
| Database Persistence - Data Access PRB2051225 [KB3141251](https://hi.service-now.com/kb_view.do?sysparm_article=KB3141251) | GlideAggregate and Platform Analytics pivot fails with 'must appear in the GROUP BY clause' when grouping or sorting by a translatable field in a non-English language | The pivot shows 'No data available.'/'Aucune donnee disponible.' instead of the data. The node log shows com.glide.db.GlideSQLException with the PostgreSQL error, 'ERROR: column 'sc_cat_item3.name' must appear in the GROUP BY clause or be used in an aggregate function.'. | Refer to the listed KB article for details. |
| Database Persistence - Data Scale PRB1968227 | DMLActionBatcher has some performance regressions comparing the StatementBatcher in MariaDB | The primary performance gap is driven by differences in how each batching mechanism manages transactional boundaries, especially during batch flush. An additional gap exists for mixed-mode statements. |   |
| Database Persistence - Data Scale PRB1975852 | MetricStatsCache causes the application node to run OutOfMemory | QueryMetricStatsListener has a cache limit of 10K entries (from AbstractMetricStatsListener), but as each entry contains a query which can be up to 2MB (hardcode limit), the user can easily spike the memory usage and run the node OOM. |   |
| Database Persistence - Graph PRB1967193 | CMDB Query Builder doesn't work when multiple OR conditions are used on location attribute | When multiple OR conditions are used on the location filter, the CMDB query builder doesn't return any results. | Scenario 1: 1. Navigate to the query builder. 2. Open the configuration item query block. 3. Select Filter. 4. Run the builder with multiple OR conditions on the location filter. Observe that no results are returned. 5. Remove all the OR conditions for location (or use one location filter). 6. Run it. {#brazil-security-notables__ol_xs3_dsj_lkc} Observe that once a second condition is added, the query builder fails. Scenario 2: 1. Navigate to the CMDB Query Builder. 2. Add a server node to the canvas. 3. Apply filters to the node with the following conditions: * Location contains 'bock' * Location contains 'via' {#brazil-security-notables__ul_zs3_dsj_lkc} 4. Run the query. Observe that no results are returned. 5. Remove one of the conditions (for example, 'Location Contains 'via''). 6. Rerun the query. {#brazil-security-notables__ol_ys3_dsj_lkc} Observe that results are now returned. |
| Database Persistence - Graph PRB1990632 | Node/edge types should allow special characters for GraphMetadataAPI | Predefined filters fail in the Graph API version of the CMDB query builder. After a platform upgrade, CMDB query builder throws the 'Problem Running Query' error. |   |
| Database Persistence - Graph PRB2005816 | The choice field with 'none' doesn't appear intermittently | The choice field with 'none' doesn't appear in some cases for some users and sets the value of the next sequence number by default. |   |
| Database Persistence PRB2006319 | ACL rules evaluated during twoPassQuery() pull in mostly empty GlideRecords for context | During dot-walks, ACL rules evaluated during twoPassQuery() often pull in mostly empty GlideRecords for context. This happens during script execution/condition evaluations. |   |
| Database Persistence PRB2075293 [KB3150595](https://hi.service-now.com/kb_view.do?sysparm_article=KB3150595) | After the upgrade to Australia, auto-increment columns are failing inserts with the duplicate_key error | Australia introduced a change to how certain database auto-increment sequences are managed. Under specific conditions, this change can cause the sequence used to generate new record identifiers to become invalid or out of sync with the database. When this occurs, attempts to create new records may fail. As a result, transient state records may not be created as expected in tables with the auto-increment field. This impacts many functional areas relying on the sequence record to track orders of states, logs or messages. This defect fix is included in the weekly patch due to its severe impact on multiple major functionalities across the platform. | Refer to the listed KB article for details. |
| Database Persistence - WDF PRB1921715 | Attempting to run an RLQuery condition on a database view removes all records unexpectedly from the view | Related List conditions aren't valid for database views, and they are blocked on the sys_report condition builder. However, a user can run an encoded query containing a related list query (just like any invalid query) and get returned an invalid query error, which is correct. The problem is after specifically running a related list condition on a db-view (valid or invalid), all the records of the view disappear, leading to other problems. |   |
| Database Persistence - WDF PRB2024733 [KB3137449](https://hi.service-now.com/kb_view.do?sysparm_article=KB3137449) | Reports containing reference-type catalog item variables (lookup) fail to render data after upgrading to the Australia release | After upgrading to the Australia release, reports that contain reference-type catalog item variable columns fail to render data correctly. The affected reference-type variables don't resolve their lookup values, and their presence in the report additionally causes all other columns --- including native table fields such as Number, Created, and Closed --- to render as empty across all rows. | Refer to the listed KB article for details. |
| Date Picker PRB2029576 [KB3061444](https://hi.service-now.com/kb_view.do?sysparm_article=KB3061444) | There's an issue with GlideDateTime.setDisplayValue | Any script that calls setDisplayValue() with an ISO-format string (yyyy-MM-dd HH:mm:ss) on an instance where glide.sys.date_format is set to anything not in FORMAT_LIST (for example, dd-MM-yyyy, MM/dd/yyyy, etc.) produces incorrect dates in Zurich. | Refer to the listed KB article for details. |
| Developer Sandboxes PRB2017438 | DSB update sets aren't exported before clone | Because sandboxes are retired, update sets from a sandbox should be saved as remote update sets on the base instance on upgrade. However, due to this problem, they may not be saved correctly. | 1. Create a sandbox. 2. Make changes in the sandbox. 3. Upgrade the instance. {#brazil-security-notables__ol_dt3_dsj_lkc} Expected behavior: There is a way to recover the work. Actual behavior: . The work is gone. Logs show jsFunction_exportUpdateSets is called. |
| Developer Sandboxes PRB2028151 [KB3122033](https://hi.service-now.com/kb_view.do?sysparm_article=KB3122033) | Nodes are failing to upgrade during self-scheduled upgrades | After an upgrade, not all app nodes that were previously hosting a sandbox are upgraded. The nodes aren't in an error state and look okay. In Upgrade Monitor, users see that the node is actually not upgraded. This can happen on any upgrade and only impacts nodes that are hosting a sandbox. It can be seen in the logs that the upgrade process is checking the version of the instance and ignoring without updating the node. It's leaving a few of the nodes to fail to get upgrade. However, the change does not reflect that and it says it was successful. | Refer to the listed KB article for details. |
| Discovery PRB1789882 [KB1651489](https://hi.service-now.com/kb_view.do?sysparm_article=KB1651489) | There's a large result set on the cmdb_tcp table in DiscoveryReconciler from CookConnections | When the Application Dependency Mapping (ADM) probe returns a large number of references to 0.0.0.0, and IP Address count is limited by the 'sn.adm.ip_expansion_limit' system property value of 1000, large result sets can occur and cause instance outages. |   |
| Discovery PRB1938058 [KB2756546](https://hi.service-now.com/kb_view.do?sysparm_article=KB2756546) | Slow query from the status count optimizer impacts parallel launching of cloud app patterns |   |   |
| Discovery PRB1986211 | Discovery.complete and discovery.canceled are triggered incorrectly | Discovery may trigger both discovery.complete and discovery.canceled events for the same status, and it may trigger discovery.canceled twice. |   |
| Discovery PRB1989981 [KB3057922](https://hi.service-now.com/kb_view.do?sysparm_article=KB3057922) | Issue with error handling for Test Credential if there's a KMF Issue | Either the Test Credential says that the credential worked ('Credential validated') or it will return this error: 'Cannot read properties of null (reading 'indexOf')'. However, this is not the actual error that's occurring. | Refer to the listed KB article for details. |
| Discovery PRB1996875 [KB2801169](https://hi.service-now.com/kb_view.do?sysparm_article=KB2801169) | Cloud Infra Patterns are launched per datacenter, impacting GCP Discovery Schedules | GCP Discovery schedules take significantly longer to complete because the system launches one pattern execution per datacenter instead of one pattern per service account containing all datacenters. This results in a significant increase in probe executions. | Refer to the listed KB article for details. |
| Discovery PRB1997816 [KB2812138](https://hi.service-now.com/kb_view.do?sysparm_article=KB2812138) | Discovery status stops at phase one on a schedule with discovery behavior | When multiple phases exist on a behavior, discovery stops at the first phase. | Refer to the listed KB article for details. |
| Discovery PRB2005873 [KB2958421](https://hi.service-now.com/kb_view.do?sysparm_article=KB2958421) | Daisy chain isn't working when a schedule is canceled | If one schedule in the daisy chain is canceled, none of the subsequent schedules in the chain are triggered. | Refer to the listed KB article for details. |
| Discovery PRB2016944 [KB2997705](https://hi.service-now.com/kb_view.do?sysparm_article=KB2997705) | Classifier probes aren't firing if the 'First checked' probe has already been fired | Discovery should fire further probes, but instead completes prematurely. | Refer to the listed KB article for details. |
| Discovery PRB2037864 | Scheduler Workers blocked by Cloud Discovery sensors waiting for discovery_device_history record locks | During Cloud Discovery, the Started and Completed counts on some Discovery Device records are updated many times. Many different sensors will be updating the same record, and be waiting for database locks for the record to clear before they can complete. With that causing extended runtime of these sensors, and given that there are lots of sensors running concurrently, updating the same record, this can lead to all scheduler worker threads being in use, blocking any other sys_trigger scheduled jobs from starting. |   |
| Dynamic Translation for Agent Chat PRB1989609 | When an instance has Now Assist installed, Dynamic Translation for Agent Chat (DTAC) doesn't honor the Dynamic Translation (DT) setting in Conversational Interfaces |   | 1. Provision an instance with Virtual Agent (VA) agent chat installed. 2. Ensure that DT is set up with a provider. 3. Ensure that Now Assist VA is installed. {#brazil-security-notables__ol_lr3_dsj_lkc} DTAC (in either direction) only displays the globe icon or is honored when DT in Now Assist Admin Console is turned on for that language. |
| Easy Import PRB1817119 | Errors appear in logs when searching for the source table name in the transform map table | Easy import doesn't support Document ID type columns. Document ID type columns require the table name in addition to record details. |   |
| Edge Encryption PRB1945424 | There's high memory utilization on proxy servers after the Yokohama upgrade | After upgrading and running Yokohama, the memory consumption is above the limit set in wrapper.conf. The user set the memory limit for 10G in the wrapper.conf, but the edge proxy doesn't respect this setting in the build. The memory goes to the physical limit and causes the proxy server to restart. |   |
| Encryption PRB1982641 [KB2977274](https://hi.service-now.com/kb_view.do?sysparm_article=KB2977274) | Scan checks are missing null checks, causing the instance scan to fail | After running the 'Insecure GlideRecord Calls', if the getFunctionCallParamters() function brings back an empty object, the instance scan fails. | Refer to the listed KB article for details. |
| Explicit Roles PRB2011506 | The NullPointerException in ExplicitRoleCollisions .handleSysUserGrmember invalidates ATF rollback context during CreateUserStepRunner execution | During the scheduled nightly ATF test execution, a null pointer exception occurs in the explicit roles collision check logic, which propagates up and invalidates the ATF rollback context. This prevents automatic rollback of test-created records (for example, Incidents, Users, Business Services), leaving orphaned data in the environment. |   |
| Flow Engine PRB1849568 | Actions without an output are unable to proceed, but have a success status |   |   |
| Flow Engine PRB1909705 | A transform script for JDBC DSAs isn't erroring out in engine major version v2 | The issue can be reproduced when data stream actions are the same scope. The issue also occurs when the data stream actions are other than global and the script include is 'Global - Accessible to All Application Scopes'. |   |
| Flow Engine PRB1937004 | A script step reference input gives a string (sys_id) instead of GRProxyStatic | A compilation should have the action's script input as a reference, but the action's script step input is resolved to a string on recompilation. |   |
| Flow Engine PRB1967579 | There's an issue with the Debug button on Flow Designer | When using the Debug button on Flow Designer in Zurich, these error message can show up: 'Cannot invoke 'com.snc.process_flow .v2.model.DebugState .getBreakpoints()' because 'debugState' is null' and 'Cannot invoke 'com.snc.process_flow .v2.model.DebugState .​get​Source​Ui​Id​To​Breakpoint​Mapping()​' because 'debugState' is null'. | 1. Provision a Zurich instance with the sn_oracle_hcm_spk plugin installed. 2. In Flow Designer, set up a flow that uses the flow action 'For Each Item in Look up Locations Stream'. 3. Test it with the debug option. {#brazil-security-notables__ol_bs3_dsj_lkc} Notice the error messages. |
| Flow Engine PRB1989760 | Execution details don't load during negative testing | The following error appears: 'There was an error loading the execution details for this flow context. Exception while executing request: Could not deserialize value from sys_flow_value with sys_id 7fb6dcdbd9363a10919050c11e4ef686'.​ | 1. Open an instance. 2. Open the FD. 3. Select the Google Drive application. 4. Select Look up file. 5. Provide a random file ID. 6. Select the Test button {#brazil-security-notables__ol_tq3_dsj_lkc} Observe that FD execution doesn't load. The following error appears: 'There was an error loading the execution details for this flow context. Exception while executing request: Could not deserialize value from sys_flow_value with sys_id 7fb6dcdbd9363a10919050c11e4ef686'.​ |
| Flow Engine PRB2036311 [KB3141836](https://hi.service-now.com/kb_view.do?sysparm_article=KB3141836) | The SLA Percentage Timer flow action overwrites the paused task_sla with stale GlideRecord state | The SLA Percentage Timer flow action (Wait until N% of SLA Duration) receives the task_sla GlideRecord captured at flow-trigger time and passes it straight into SLACalculatorNG.calculateSLA. The pause guard inside calculateSLA reads pause_time off that in-memory snapshot rather than re-checking the database. If another transaction pauses the task_sla row between the flow trigger and the timer firing, the in-memory pause_time is still nil, the guard is bypassed, and updateTaskSLAs overwrites duration/percentage/ time_left/ business_\* / has_breached using running-state values. This silently corrupts the paused row. The same race also lets concurrent recalculations (SLA engine business rules, Calc SLAs on Display, breakdown processor, SLA repair tool) be overwritten by the stale flow GlideRecord. As a result, users see SLA timers that continue to accrue elapsed time while the underlying task is paused, and the breach state may flip incorrectly. | Refer to the listed KB article for details. |
| Flows (Family Channel) PRB1914472 | The 'Retry policy' isn't accessible when a flow is executed by a non-admin |   | 1. Create a flow with a REST step, which has a retry policy specified inline. 2. Invoke the flow in the background as a non-admin user. {#brazil-security-notables__ol_qr3_dsj_lkc} See messages saying 'Security constraints prevent displaying information' due to attempting to access the 'Retry' policy as a non-authorized user. |
| Flows (Family Channel) PRB1990495 [KB2780048](https://hi.service-now.com/kb_view.do?sysparm_article=KB2780048) | The 'Update record' action updates an invalid GlideRecord and triggers business rules when the reference record is deleted while a flow is in progress | When the record that is passed to a subflow is deleted while the flow is in progress, any 'Update record' action in the subflow doesn't error out with 'Glide record is invalid' type errors. Instead, the 'Update record' action in the subflow falls back and iterates on all records in the table, causing substantial data impact. | Refer to the listed KB article for details. |
| Flows (Family Channel) PRB2003332 | The user receives the message, 'Number of rows hidden by security constraints ' in Flow Designer related sub-flows | The user sees the security constraints message when opening 'See related flows' in sub-flows. | 1. Open Flow Designer. 2. In the 'Subflows' tab, open a subflow. 3. In the 'More' menu, select See related flows. {#brazil-security-notables__ol_ss3_dsj_lkc} Notice the security constraint message when it opens. |
| Flows (Family Channel) PRB2019365 | Domain trigger for agentic workflow only works if created by an admin of that domain and not another admin changing the picker | When a user with elevated privileges switches to a child domain (for example, Oceanic) via the domain picker and publishes a flow, the sys_flow_trigger_plan record gets created in the wrong domain (global instead of Oceanic), while the sys_hub_flow record is correctly in the child domain. |   |
| GlideAggregate API PRB1922184 | Data isn't visible in the dashboard when using time series visualization and using keywords as a filter | The following error appears: 'Error : No Data Available. There is no data available for the selected criteria.' The issue doesn't occur with other visualizations. |   |
| GlideRecord PRB1922298 | Assessment Metrics (asmt_metric) in a question bank disappear after they're used in a published survey | On an instance running on RaptorDB (postresql), the assessment metric in the question bank can disappear. The issue can't be reproduced on MariaDB. |   |
| Group and Action Framework - Family PRB2025623 | The base instance business rule 'CSM NATT- Assign case to cluster' leads to OutofMemory heap space errors | Multiple 'ASYNC: CSM NATT- Assign case to cluster' jobs running on the nodes are causing OutOfMemoryError: heap space, leading to node restarts. | 1. Open an instance with attachment sizes on the ml_model_artifact table that are over 100 MB. 2. Trigger multiple 'ASYNC: CSM NATT- Assign case to cluster' jobs to run on a single node. {#brazil-security-notables__ol_vq3_dsj_lkc} Notice the memory consumption by these jobs. |
| HR Service Delivery PRB2018687 | The Edit button does not work for the Granular Delegation rule | The record edits are not reflected even though the Granular Delegation rule was created. | 1. Install the Granular Delegation Plugin. 2. Create a Granular Delegation Rule. 3. Save it. 4. Use the Edit button to modify the user criteria to the delegate/delegator. {#brazil-security-notables__ol_us3_dsj_lkc} Notice that after the edit, the record doesn't reflect the changes. |
| HTML Field Type Editor PRB1667004 [KB1348033](https://hi.service-now.com/kb_view.do?sysparm_article=KB1348033) | Paste formatting options from aren't honored in Service portal | A pop-up gets displayed in Service portal whereas in Platform it doesn't. | Refer to the listed KB article for details. |
| HTML Field Type Editor PRB1768733 | The HTML field shows as changed even though no changes occurred | The HTML field shows as changed without changes being made in 'History' \> 'Calendar'. There are no user updates to the rich_description field, but a sys_history_set update record appears. | 1. Navigate to any open incident form view. 2. Select ConfigureForm Layout. 3. Add a new field (for example, Rich Description) with HTML type. 4. Save. 5. Create a sample record. 6. Navigate to Scripts - Background. 7. Run a test script. 8. Navigate to the incident just created via the background script. 9. Update some field (for example, Caller, Description, etc.). 10. Save. 11. Select HistoryCalendar. {#brazil-security-notables__ol_wr3_dsj_lkc} |
| Inbound API Integration Usage Framework PRB1988771 [KB3082116](https://hi.service-now.com/kb_view.do?sysparm_article=KB3082116) | IPAccessListFilter handling for malformed IP addresses | Inbound REST API calls coming through proxy servers (x-forwarded-for header with multiple IP's) or malformed IP address can sometimes fail in Zurich and Australia instances. | Refer to the listed KB article for details. |
| Incident Communications Management PRB2028847 | A skipped error occurs upon upgrading to Australia | After upgrading to Australia, a skipped error occurs because sys_​gauge_​4f1906b1bf3001003f07e2c1ac07393a record doesn't exist. Repairing the plugin doesn't resolve the issue. | 1. Before upgrading, check that the com.snc.iam plugin isn't installed and that it has three dependencies. 2. Upgrade to Australia. 3. Check if the com.snc.iam is installed upon the upgrade. 4. Check if the skipped error occurred. If so, see if that a problematic record exists. {#brazil-security-notables__ol_ds3_dsj_lkc} |
| Instance Data Replication (IDR) PRB1721309 [KB1584953](https://hi.service-now.com/kb_view.do?sysparm_article=KB1584953) | An app node is throwing a java.io.IOException: 'Too many open files due to IDR/Kafka issues' | The node is unresponsive or having odd behavior, such as the sidedoor displaying an empty page and intermittent xmlstats.do outputs. | Refer to the listed KB article for details. |
| Instance Scan PRB1992382 [KB2901125](https://hi.service-now.com/kb_view.do?sysparm_article=KB2901125) | Instance scan jobs get stuck in a sleep loop for days, which causes the subsequent scans to fail | Instance scan findings are written to the database asynchronously and are tracked using a global counter. If any write fails, the counter doesn't decrement properly; it goes up but never comes back down. This causes all future scans to hang indefinitely, waiting for a counter that will never reach zero. There's no timeout or logging to flag this, so scans can get stuck silently. | Refer to the listed KB article for details. |
| Instance Scan PRB2017072 | Instance scans detecting custom records instead of other records are modified from the baseline | Instance scan checks like 'Differs from baseline' are detecting custom records created by users. As per the script used, only the records which are modified should be detected. |   |
| Instance Security Center Session Management (no longer supported) PRB2024942 [KB3071146](https://hi.service-now.com/kb_view.do?sysparm_article=KB3071146) | SessionDebug not deregistered from LogDispatcher on session expiry, causing unbounded heap growth and out of memory errors | When a user enables session-level debug logging (via sys_debug.do), a SessionDebug instance registers itself as a LogListenerAdapter in the global LogDispatcher. If the owning GlideSession expires via timeout or is invalidated rather than through a clean logout, SessionDebug is not deregistered from LogDispatcher. The orphaned SessionDebug continues to receive every log event from the JVM across all threads. With verbose debug scopes (for example, CacheSessionDebug), individual OutputLine entries average 10--25 KB each. The output list is capped at \~10,001 entries, meaning a single orphaned SessionDebug can retain 200--300+ MB of heap indefinitely until the node restarts. | Refer to the listed KB article for details. |
| Integration Hub Data Stream Actions PRB1979273 | Data stream flow report is not available due to orphaned context records | The issue occurs because Data Stream context records are populated with an incorrect source_record sys_id during execution. Since the referenced record does not exist in the sys_flow_context table, the context records are identified as orphan records and deleted by the Unreferenced Record Cleaner rule. Once deleted, the Flow Report cannot be generated, resulting in a null flowReport object and a runtime exception. | 1. Create a Data Stream action, or use an existing Data Stream action available via XML import. 2. Trigger the Data Stream action and allow the execution to complete. 3. Verify that context records are generated for the action, including child contexts (for example: test_with_empty_page.page$8). 4. Open one of the generated context records and inspect its XML. Note the value populated in the source_record field. 5. Verify that the source_record sys_id does not match any record in the sys_flow_context table. 6. Wait for the Unreferenced Record Cleaner scheduled job to run (approximately one hour). 7. Attempt to open the Flow Report for the Data Stream execution. {#brazil-security-notables__ol_nr3_dsj_lkc} Expected behavior: Data Stream context records should reference a valid source record in the sys_flow_context table. Context records should not be treated as orphaned. Flow reports should remain available and load successfully. Actual behavior: Data Stream context records reference a non-existent source record in the sys_flow_context table. These records are treated as orphaned and removed by the Unreferenced Record Cleaner. Flow Report fails to load with an error. |
| Integration Hub PRB1870601 | A PowerShell step error message is no longer populated | On flow engine V1, the user ran a flow execution and can observe 'Error Code' and 'Error Message' are outputed in the 'Output Data' section when the PowerShell script returns an error. However, if users switch to flow engine V2, the same error code and error message can not be rendered into the 'Output Data' section. |   |
| Integration Hub PRB1975287 | The 'Send Email' flow action adds unnecessary line breaks at the end of the email | Send Email Flow Action adds unnecessary line breaks at the end of the email. Please refer to the steps to reproduce and CSTASK1282991 Reproduced in Y, Z. | 1. Create a new flow with the Send Email action. 2. Add test recipients and subject. 3. In the rich text body, add the following: 'パスワード初期化依頼が正常に行われました。これから受付作業に入ります。完了連絡まで今しばらくお待ちください。申請状況はポータルトップ右下の「あなたのヘルプデスクへの問い合わせ」よりご確認いただけます。以下、申請内容となっております。【セルフパスワードリセットを実施しましたか？】：【リセットができなかった理由】：【初期化対象者氏名】：【初期化対象所属】：【初期化対象メールアドレス】：【対象IDの種類】：【連絡先電話番号】：【上司氏名】：【上司所属】：【上司メールアドレス】：【初期化理由】：【パスワード初期化に同意しますか？】： ' {#brazil-security-notables__ol_fs3_dsj_lkc} Observe that many line breaks are added at the end of the email. |
| Integration Hub PRB1983057 | There are base instance Script Includes with duplicate names (for example, RestStepMultipartUtil and RestStepFormUrlEncodedUtil) |   | 1. Provision an instance with the IH starter plugin and SSE step (com.glide.hub.action_step.sse) installed. 2. Navigate to the sys_script_include table. 3. Search for 'name contains reststep'. {#brazil-security-notables__ol_tr3_dsj_lkc} Observe that duplicate names appear. |
| Integration Hub PRB2033476 | After upgrading to Australia, password actions such as 'Change User Password' and 'Reset User Password' fail | The password actions 'Change User Password' and 'Reset User Password' are failing from Microsoft Active Directory v2 Spoke. |   |
| Internationalization Features PRB1892286 [KB2277705](https://hi.service-now.com/kb_view.do?sysparm_article=KB2277705) | A non-admin user can't change a dashboard name by specific steps when the system language is set to Japanese | The dashboard name should be updated correctly and reflected in both the primary record and its translated fields, as it is in the Washington and Xanadu versions. In the Yokohama version, the update to the dashboard name fails silently when the Japanese language is enabled and the sys_translated record exists. | Refer to the listed KB article for details. |
| Issue Auto Resolution for Virtual Agent PRB1657388 [KB1307989](https://hi.service-now.com/kb_view.do?sysparm_article=KB1307989) | Issue Auto Resolution (IAR) for HR isn't able to execute for users who remove HR roles from the 'admin' role due to internal data governance policies | Affects users using IT and HR products on the same instance. Due to the data internal visibility/governance policies, users have removed a number of HR roles (for example, 'sn_hr_core.admin' role) from the admin role, resulting in users in the IT business units not having access to the HR side of the platform. Removing the roles from the admin profile prevents the 'system' user from executing the AutoResolution scripts includes. The 'system' user no longer has access to the HR tables of the instance, hence it can't extract the necessary information for auto resolution ML Configuration Language solution, auto resolution context, or write to HR records. | Refer to the listed KB article for details. |
| IT Service Management Foundation License Control PRB2021441 [KB3032668](https://hi.service-now.com/kb_view.do?sysparm_article=KB3032668) | Unable to rollback the plugin 'com.​snc.​itsm.​foundation.​license_​control' |   | Refer to the listed KB article for details. |
| JVM at Scale PRB2032235 [KB3078521](https://hi.service-now.com/kb_view.do?sysparm_article=KB3078521) | Memory watcher isn't logging active transactions in the Australia release |   | Refer to the listed KB article for details. |
| Key Management Framework (KMF) for Platform Encryption PRB2058369 [KB3140571](https://hi.service-now.com/kb_view.do?sysparm_article=KB3140571) | Midserver is unable to fetch credentials after upgrading to Zurich or Australia | In certain versions, there's a Unified Secrets Gateway (USG) service for credential management. During the upgrade to those versions, a system trigger script is designed to automatically execute and populate the sys_​secret_​identity_​group_​member table with the MID Server identity group mappings required for USG authentication. However, this trigger fails to complete successfully, leaving the table incompletely populated. As a result, the MID Server can't authenticate with USG and fails to retrieve credentials. | Refer to the listed KB article for details. |
| Knowledge Blocks PRB2000541 | There are formatting issues in the KB article view compared to the 'Details' tab view | There are differences in the formatting of the KB article between the 'Details' tab and the 'View article' view. | 1. Open the Compliance workspace. 2. Navigate to List modulesAll Policies. 3. Create any policy record with all the required fields completed. 4. Switch to the 'Policy text' tab. 5. Select Import word document. 6. Import the word document. 7. Select Request review. 8. Select Request approval. 9. Switch to the 'Approvals' tab. 10. Approve the record. 11. Switch back to the 'Details' tab. Notice that there is a KB article generated in the Published policy field. {#brazil-security-notables__ol_lt3_dsj_lkc} Notice that the formatting in the KB article 'Details' tab and the 'View article' view are different. |
| Knowledge Management PRB1969145 | The Next button doesn't respond when creating a Knowledge article from the Knowledge List view | When creating a Knowledge article from the Knowledge List view, selecting the Next button on the kb_knowledge_create wizard does nothing. The issue occurs when the referring URL includes a URL‑encoded sysparm_query parameter (for example, sysparm_referring_url =kb_knowledge_list.do %3Fsysparm_query%3D...). The client script attempts to split on 'sysparm_query=', but the encoded value prevents a proper split, causing a TypeError and freezing the wizard. Users are unable to proceed to the article form, impacting article creation. |   |
| Knowledge Management PRB1975454 [KB3151964](https://hi.service-now.com/kb_view.do?sysparm_article=KB3151964) | The 'View article' link in Manager Hub is not working as expected for employee users | After selecting the article as an employee from the results, the article is empty because it the fields from the template article are not rendering. | Refer to the listed KB article for details. |
| Knowledge Management PRB1997589 [KB2970962](https://hi.service-now.com/kb_view.do?sysparm_article=KB2970962) | A published article displays a grey HTML body when ECE and the 'Minor edit' property are turned on |   |   |
| Knowledge Management PRB2000521 | Support for Knowledge blocks in ECE | Knowledge blocks are not supported in ECE. Ideally, blocks should be supported in ECE. |   |
| Knowledge Management PRB2002569 [KB2930942](https://hi.service-now.com/kb_view.do?sysparm_article=KB2930942) | The user is no longer able to edit the workspace view of Knowledge Forms | When attempting to modify the Workspace configuration for Knowledge Base articles, the system prevents changes from being made. The related components appear to belong to a private application scope, which restricts editing. The user receives the message, 'The 'Knowledge' section is in the sn-​component-​workspace-​knowledge application and cannot be edited. The installed application 'sn-​component-​workspace-​knowledge' is private.' This blocks customization or adjustments to the Knowledge Form layout within Workspace. | Refer to the listed KB article for details. |
| Knowledge Management PRB2071699 | The knowledge search returns empty results for guests users on the CSP portal | No search results are displayed. However, when the user navigates from Knowledge Base, they can access the article as a guest. | 1. Navigate to the CSP portal as a guest user. 2. Configure the Knowledge Base for guest users. 3. Make widgets public. 4. Navigate to the homepage. 5. In the search bar, search for some text that's present in an article. {#brazil-security-notables__ol_dr3_dsj_lkc} Observe that no search results are displayed. However, when the user navigates from Knowledge Base, they can access the article as a guest. |
| Language and Translations PRB1931121 | The set language doesn't stay consistent on the login page |   |   |
| Language and Translations PRB1960166 | The Japanese translation of 'No' for a Yes/No variable isn't correct |   |   |
| List Administration PRB1951502 | When a user groups by any column and if it returns more than 20 rows, the list view only displays 20 rows even when the user selected to display 100 | The maximum number of records displayed per group is the number of records per page in list view. If users select to show 100 rows in one list page, it shows 100 rows in the grouped list, but not the list view rows. | 1. Navigate to incident.LIST. 2. Right-click on the 'Number' column. 3. Group by 'number'. 4. From the contextual menu options, select to show list 100 rows. {#brazil-security-notables__ol_rr3_dsj_lkc} Expected behavior: The list view should displays 100 records. Actual behavior: The list view still displays 20 records. |
| List Administration PRB1963197 | The Duration field displays '0 seconds' in a Core UI list when the value is null |   | 1. In Zurich, navigate to any table list view that contains the Duration field. 2. Filter by '\<DURATION_TYPE_FIELD\>' is 'Empty'. {#brazil-security-notables__ol_ur3_dsj_lkc} Review that records have '0 seconds' even if there's no value in the records (empty). |
| List Administration PRB1991341 [KB2803013](https://hi.service-now.com/kb_view.do?sysparm_article=KB2803013) | Unable to update User field / other fields at Certification Task level | In the Certification Task record, under the inline level, the User field or other editable fields are not editable. When attempting to change the value by double‑selecting the field, the field goes into a loading state and never allows selection of another. | Refer to the listed KB article for details. |
| List Administration PRB1994887 | Issue with sharing a list from My List, users are only able to select 10 users | When the user creates a list in SOW under My List, they can share the list to the users. However, the drop-down list that shows both users and user groups shows only ten records. | 1. Open SOW. 2. Create a new list under my list. 3. Share the list to users. {#brazil-security-notables__ol_it3_dsj_lkc} Notice there are only ten options available, and after selecting all the ten users it appears empty. |
| List Administration PRB2009991 [KB3090094](https://hi.service-now.com/kb_view.do?sysparm_article=KB3090094) | 'Workflow'-type fields are displaying as 'Pending - has not started' for all values | This requires a single-line change that adds a defensive .clone() call to deep-copy the choice list before WorkflowIcons.process() mutates it. This prevents the shared cache from being poisoned by in-place label overwrites. | Refer to the listed KB article for details. |
| List Administration PRB2012758 | List fails to load due to a DataFetchingException from NowAssistSkillConfig | The list page in Service Operations Workspace doesn't load; it looks like the page is processing. NAA code is called and throws an exception, which results in list load error. |   |
| List Administration PRB2020153 | The tab view and list view aren't working correctly | Tab view and list view not working correctly. | Refer to the listed KB article for details. |
| List Administration PRB2027491 | NullPointerException in List​Layout.​get​Grouped​Row​Layout​Query from null Integer auto-unbox on List​Layout​Builder.​get​Record​Count​Limit()​ | \[ZP8 regression\] NullPointerException in List​Layout.​get​Grouped​Row​Layout​Query from null Integer auto-unbox on List​Layout​Builder.​get​Record​Count​Limit()​ Caused By Task : DEF071991. |   |
| List Administration PRB2030898 | The 'Selected stage' icon isn't applied when WorkflowIcons has already assigned a default icon |   |   |
| List Administration PRB2031478 [KB3074807](https://hi.service-now.com/kb_view.do?sysparm_article=KB3074807) | The 'List edit' pop-up is not working in UI16 view with Polaris disabled view | The user is not able to edit values from the List view, and the 'List edit' pop-up is partially or not visible at all. The 'List edit' pop-up should be visible for every row and for every column. | Refer to the listed KB article for details. |
| List Administration PRB2033285 | There's an Australia update issue with roles not appearing in the 'Table/workspace' view | Having a dictionary entry with 'Use Dependent Field' turned on and pointing to a boolean dictionary entry on the same table causes the values on the list to not display. |   |
| List Administration PRB2033991 | The column filters are not applying as expected | When applying the column level filter, the select is empty for the Short description field, and the user observes that the list is not filtered. |   |
| List Administration PRB2034071 | The underline that sets links apart only appears on hover and keyboard focus | In HR Agent Workspace list view (or in any workspace that uses the now-grid component to render lists), links in the resting state are distinguished from the surrounding non-link text by color only. The link color computes to RGB =, which is about 2.7:1 against the adjacent text color, below the 3:1 needed for a luminance-based distinction. |   |
| List Administration PRB2036908 [KB3097895](https://hi.service-now.com/kb_view.do?sysparm_article=KB3097895) | An error occurs reading, 'Sorry, an error occurred or this page isn't available' | The page times out. | Refer to the listed KB article for details. |
| List Administration PRB2039348 | In the List view, the first choice is shown and is not the selected choice for the lookup select box variable in the workspace | Irrespective of whatever option the user might have selected, it will show the first choice in the workspace List view. |   |
| List Editor PRB2001509 | Inline list editing pop-up edit box UI is mispositioned when trying to edit a reference field by double clicking on it | The pop-up edit box UI is mispositioned when trying to edit any inline editable field by double clicking on it on a List Report added to a Dashboard. The dialog box that appears is positioned away from the actual field being edited and has an incorrect format: The cross is not red and the square around the magnifying glass is incomplete. |   |
| List Filters PRB1982205 | Data visualizations don't translate to the selected language | The data visualization column is displayed in English instead of Swedish. Only the left sidebar is translated into Swedish. | 1. Provision an instance with the French language pack (com.snc.i18n.swedish) installed. 2. Open Visualization Designer in Platform Analytics Workspace. 3. Create a new visualization. 4. Change the session language to Swedish. {#brazil-security-notables__ol_pr3_dsj_lkc} Observe that the column is displayed in English instead of Swedish. Only the left sidebar has been translated into Swedish. |
| List Filters PRB1994984 | Column filters on date/time fields aren't working as expected on Data Visualizations when the time format is HH:mm | When filtering list visualizations by column filters, such as 'Actual end date', no data is filtered. Users customized the time format (glide.sys.time_format) from HH:mm:ss to HH:mm. | 1. Set the glide.sys.time_format to HH:mm. 2. Create a data visualization. 3. Add 'change_request' as a data source. 4. In columns and rows settings, set the following to enabled: 'Show option to personalize columns - Show column filtering'. 5. Enter a date in the column filter for 'Actual start date'. {#brazil-security-notables__ol_zq3_dsj_lkc} Observe that nothing is filtered. |
| List Pagination PRB1980717 | Grouping by dot-walked fields causes incorrect pagination and empty pages | When grouping a list by a dot-walked field in Configurable Workspace, pagination behaves incorrectly. The list shows a limited number of groups per page, but the system calculates pagination as if all rows were loaded, resulting in empty pages when navigating past the valid results. This issue doesn't occur when grouping by a field that exists directly on the table (non dot-walked field). | 1. Log in. 2. Open Customer Service Management/Field Service Management Configurable Workspace or Service Operations Workspace. 3. Navigate to the 'List' page. 4. Open any list of records with more than 20 records per page (50 or 100). 5. Select Group by to group by a field. 6. Dot-walk to a nested field from one of the reference fields. 7. After selecting Run, the list refreshes to show the list on records grouped by Caller \> Location. {#brazil-security-notables__ol_br3_dsj_lkc} See that the list currently displays '1-20 of 23 groups'. Somehow, even if the list is only displaying 20 groups, the system considers that the page contains 50 records (based on the 'Rows per group' parameters). If users select the second page, it's blank. |
| MID Server PRB1898139 [KB2398708](https://hi.service-now.com/kb_view.do?sysparm_article=KB2398708) | The MID server doesn't start due to a parenthesis in the home folder's path, leaving the MID Server down after upgrades | If there's a parenthesis in the MID server path, the upgrade from the Yokohama version fails. This problem is specific to the Set-FolderPermissions.ps1 script. | 1. Create a MID server with a parenthesis in the path. 2. Run start.bat. {#brazil-security-notables__ol_oq3_dsj_lkc} Notice that it fails with this line: '\\ was unexpected at this time.' The upgrade log also includes a 'was unexpected at this time' syntax error specific to the Set-FolderPermissions.ps1 path. |
| MID Server PRB1965219 [KB2636231](https://hi.service-now.com/kb_view.do?sysparm_article=KB2636231) | If pre-checks are turned off, or if the 2GB free check isn't enough, MID Servers can run out of disk space during upgrades: 'No space left on device' | This should always be checked for before committing to an upgrade. If this happens while downloading or extracting the ZIP files, the upgrade aborts before launching the upgrade process and shutting down the MID server. If this happens when running the upgrade process, during the backing up of files for rollback, or copying new files over old, then rollback should preserve the MID Server files as they were, and restart the MID Server service successfully on the previous version. |   |
| MID Server PRB1970951 | 'Failed to Upgrade' banner and issues record are misleading when a MID Server has been down for years | When a MID server record's version value doesn't match the instance's version, it's assumed it failed while upgrading. The errors mention only the upgrade and warn that there may be integration outages. Users may assume that this is a new issue caused by the recent upgrade and that it's urgent, and will often open a support case. That is a valid issue if the MID Server had been recently up. However, if a MID Server hasn't been in communication with the instance, and it's been in down state since before the last instance upgrade, that message is misleading. The key point the user needs to understand and resolve is that it's been down for months or years, not that it hasn't upgraded recently. | 1. Install a MID Server. 2. Retire it. 3. Wait five years. 4. Look at the MID server issues records. 5. Open the MID server form. {#brazil-security-notables__ol_ks3_dsj_lkc} Expected behavior: The issue is that it is down. The next steps are to either get it up again (if it's still needed and meant to be up), or delete the orphan record to avoid more ignorable errors in future. Actual behavior: There are many errors about the recent failed upgrade, wrongly suggesting this might be affecting something right now, and the failed upgrade is the cause. |
| MID Server PRB1971530 [KB2949602](https://hi.service-now.com/kb_view.do?sysparm_article=KB2949602) | On some hosts, MID Servers need more than five chances to start up the JVM within 30 seconds, leaving them down during restarts or upgrades | When a MID Server service starts, the Tanuki Wrapper process runs, which then has to start the Java JVM process (java.exe), which in turn runs the MID Server application. In the situation where apparently the 'Wrapper Process has not received any CPU time', the wrapper gives the JVM only 30 seconds to start. It will then only retry five times total, then give up, leaving the MID Server Down. A manual start of the MID Server service is then needed, which requires access to the Host server, often requiring several attempts to start the service before the JVM starts within the 30 second timeout. This is seen in 'soft' restarts, such as re-key, where only the JVM is restarted and also 'hard' restarts from the 'Restart MID' related link and where the service is stopped and started. This has been observed on VMware VMs, where the Windows OS is reporting plenty of free CPU at the time. | Restart a MID Server either from the service, from the MID Server form, during re-key, validate/invalidate, or upgrades. Expected behavior: The MID Server was up, and is expected to still be up afterwards. Actual behavior: The wrapper can't start the JVM and MID Server application and leaves the MID Server down. This results in an outage for any features using exclusively that MID Server, or performance issues if failover/load balancing is implemented. |
| MID Server PRB1986560 | An MID Server Rate limit exceeded error is logged when it's actually working as designed | A rate limiting feature added in Washington DC throttles the execution of SystemCommands. When the invocation rate exceeds the maximum configured rate, a cooldown period will begin and additional invocations of the system command will be ignored until the cooldown period has expired. This causes an error in the agent log. |   |
| MID Server PRB1998489 | Root Cause Analysis (RCA)/Cross Scope Access changes are casuing the 'MAW' list and record declarative actions to be blocked from execution | Changes made in RCA/Cross Scope Access on the platform side have impacted the declarative list and record actions for MAW from working. When attempting to execute any of these actions which call the MIDManage API, users see an error that the RCA record isn't present for this script execution, despite the Cross Scope Access record being defined. | 1. Install MID Admin Workspace on any release on a fresh instance. 2. Try to validate MID Server. {#brazil-security-notables__ol_is3_dsj_lkc} Notice that this action is blocked and the corresponding error banner displayed to the user. |
| MID Server PRB2006438 | MID Server shuts down unexpectedly during startup due to sorting/filtering logic mismatch in ECC queue record batching | During MID Server startup, the server retrieves ECC queue records in batches from the instance. A mismatch in the sorting and filtering logic causes some records to be missed, resulting in an empty response. This triggers a MIDServerInfoException: No 'sysIds' array is returned in the response error, causing the MID Server to shut down unexpectedly. |   |
| MID Server PRB2012665 [KB2953193](https://hi.service-now.com/kb_view.do?sysparm_article=KB2953193) | MID Server upgrades fail because the MID.max.extract .file.size property default is too low | The MID Server property MID.max.extract .file.size property default of 500MB is too low for MID Server upgrades. Upgrades fail at the download/extract stage with the following errors, after the MID-core zip file has been successfully downloaded: '...Exceeds the maximum size (500000000). Unable to download package The size of uncompressed files is too big or too many entries in the zip file'. This fails before the MID Server is shut down, avoiding outages, but causes repeated failed upgrades, and the risks of running with an instance vs MID Server incompatibility, that generally has been known to break some features and cause data loss. | Refer to the listed KB article for details. |
| MID Server PRB2038587 | The MID upgrade fails after Australia with the error message, 'Entry doesn't have valid signer' | MIDs upgrading to Australia have MID upgrade failures with the error message, 'Signature verification failed: Entry doesn't have valid signer'. |   |
| MID Server PRB2039307 | MID Server not upgrading on Prod, dev1 and test2 ServiceNow Instance | If the existing upgrade zip files on the install server have to be mended and replaced, for whatever reason, for MID Server auto-upgrade to work, then the instance does not re-download them. MID servers that download through the instance will continue to download the non-working files from before they were mended. |   |
| MID Server PRB2040686 [KB3138403](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3138403) | Linux MID Server pre-checks don't check that the service user would be able to run start.sh, before committing to an upgrade that would leave the MID Server Down | Linux MID Servers can end up stopped during the upgrade process if start.sh is prevented from starting the service again with 'Interactive authentication required' or 'Access denied' errors. This would also cause a Restart MID command from the instance, either from the MID Server's form, or when a plugin activation/upgrade triggers a restart, to leave the MID Server down. This problem is for error handling in this situation. That scenario should be checked for on startup, and as part of the pre-upgrade checks before committing to the upgrade. Breadcrumbs should be left before a restart, so that the MID Server can know a failed start happened, maybe read the relevant logs automatically, and clearly give the next steps to the user. |   |
| Mobile Platform PRB1769455 | Filter to sort doesn't work offline in Xanadu | For scripted data items, there is another flow of processing records in offline mode. Filter and sorting mechanisms were not implemented for this flow. |   |
| Multimodal Service (Family Channel) PRB2010847 [KB2981757](https://hi.service-now.com/kb_view.do?sysparm_article=KB2981757) | After upgrading an instance in Zurich, a skipped record error is consistently observed in the upgrade history | The issue is reproducible on a clean instance, indicating that it's not caused by customizations or data inconsistencies introduced post-deployment. | Refer to the listed KB article for details. |
| Multi-provider Single Sign-on (SSO) PRB2003491 [KB3065130](https://hi.service-now.com/kb_view.do?sysparm_article=KB3065130) | An admin-only ACR user can't login via local log in as the sso_config_admin role check in ACRUtil.isACRUserByUserID() ignores the admin role | When SSO Account Recovery (ACR) is turned on in an instance, an admin user registered as an ACR recovery account may be unable to log in via local login even when valid credentials are entered. The system doesn't recognize the user as a valid ACR recovery account and blocks the login attempt. The primary purpose of ACR is to provide a fallback login path during an SSO outage. Due to this issue, the designated recovery administrator loses access to the instance at the exact moment the fallback is needed. This issue was introduced in the Australia release. | Refer to the listed KB article for details. |
| Natural Language Query (Family Release) PRB1992648 [KB2794876](https://hi.service-now.com/kb_view.do?sysparm_article=KB2794876) | com.snc.nlq.MetadataGenerator modifies GlideElement objects in TableDescriptorCache | This issue is observed in production. |   |
| Next Experience Unified Navigation PRB2003211 | /api/now/ui/polaris/menu is slow to build the cache on login | 1000s of each of these queries are run to retrieve user preferences and screen accessibilities. It should be able to retrieve all of most of these items in 1 query. |   |
| Next Experience Unified Navigation PRB2015985 [KB3143862](https://hi.service-now.com/kb_view.do?sysparm_article=KB3143862) | Tags on task records aren't following background color hex codes after a Zurich upgrade |   | Refer to the listed KB article for details. |
| Next Experience Unified Navigation PRB2038994 | Duplicate modules appear when an application is added to the custom menu |   | 1. Create a custom menu. 2. Add an application to the custom menu through the related list. 3. Refresh the menu request by selecting the Refresh button in the 'All' menu. {#brazil-security-notables__ol_or3_dsj_lkc} Expected behavior: The custom menu has an application with correct modules. Actual behavior: The custom menu has an application with duplicate modules. |
| Now Assist in AI Search PRB1920760 | GenAI log IDs are not returned for Now Assist Genius Results | This issue occurs in Virtual Agent, portal, Now Assist Actions, Now Assist Q\&A, Synthesized Response, or anywhere a Now Assist Genius Result (GR) can be returned. Feedback is not logged even though there should be a value after the user selects the Thumbs up icon or Thumbs down icon on the Genius Result (GR). | 1. Open Virtual Agent. 2. Perform a search that returns at least one Now Assist Genius Result (GR). 3. Select the Thumbs up icon or the Thumbs down icon on the GR. 4. Run the background job to process queued signals. 5. Open the sys_generative_ai_log table. 6. Inspect the Feedback field for the transactions relevant to the Genius Result the user provided feedback on. {#brazil-security-notables__ol_hr3_dsj_lkc} Expected behavior: There should be a value such as 'Rejected' for negative feedback or 'Accepted' for positive feedback. Actual behavior: The feedback is not logged. |
| Now Assist Panel PRB1965617 [KB2768233](https://hi.service-now.com/kb_view.do?sysparm_article=KB2768233) | Legacy Now Assist Portal doesn't load upon upgrade | The Now Assist panel bubble opens when selected, but the panel doesn't fully load. The interface remains stuck in a loading state, and no content is displayed to the user. | Refer to the listed KB article for details. |
| Now User Experience PRB2038702 [KB3134148](https://hi.service-now.com/kb_view.do?sysparm_article=KB3134148) | A scoped public UI page isn't accessible without a login unless 'Name' is used vs a scoped endpoint in a sys_public record | It should be accessible without a login, so a user can complete the authentication from Outlook. | Refer to the listed KB article for details. |
| OAuth PRB2018183 | The deny listed system property glide.oauth. jwt.token_request .honor_claim_keys is included in an upgrade payload, resulting in a misleading 'skipped' upgrade log entry | During a Zurich upgrade, the system property glide.oauth. jwt.token_request .honor_claim_keys (from com.​snc.​platform.​security.​oauth)​ appears as a skipped entry. This property is deny listed by design and therefore never loaded into sys_properties on user instances. | 1. Navigate to AllUpgrade CenterUpgrade History. 2. Open the record of upgrading in Zurich. 3. Select the Skipped Changes to Review tab. 4. Select the the skipped record for sys_properties_ 107762282f223210 3698319c003f9b2f.xml. {#brazil-security-notables__ol_ct3_dsj_lkc} |
| OneExtend PRB1985682 | The User field is blank in the 'Generative AI Usage Logs' table |   |   |
| OneExtend PRB1998199 | NAVA gets stuck intermittently |   | 1. Ensure Response Streaming is enabled. 2. Open NAVA. 3. Enter 'Creator.' {#brazil-security-notables__ol_qs3_dsj_lkc} Notice that NAVA will get stuck intermittently. |
| OneExtend PRB2010146 | AI Agent user context isn't cleared out after the GenAI Skill call is completed | Records may be incorrectly marked as 'Updated by Now Assist'. | 1. Run any GenAI Skill from background. 2. Update/create any record immediately after the GenAI Skill call. {#brazil-security-notables__ol_st3_dsj_lkc} Observe that the record is incorrectly marked as 'Updated by Now Assist'. |
| OneExtend PRB2011330 | The Add as Update Set button creates invalid update sets with updates in the wrong application scope in Zurich | Attempting to commit retrieved update sets between versions may fail in Zurich with errors such as, 'Cannot commit Update Set 'X' because: Update scope id 'A' is different than update set scope id 'B'. Resolve the problem before committing.'. | 1. Navigate to Now Assist AdminNow Assist skills. 2. Open 'ITSM. 3. Find the 'Case summarization' skill. 4. Select ... (three dots). 5. Select Make a copy of skill. 6. Navigate to Now Assist Skill KitHomepage. 7. In the section called X, find the copied skill. 8. In the Prompt editor, change the prompts for three or four prompts. 9. Save the changes. 10. In the Prompt editor, change the maximum response tokens for three or four prompts. 11. Save the changes. 12. At the top right of the form, select the down error by Publish and select Add as Update Set. 13. Open the resulting update set. Notice that some of the records will have different scopes than the update set to which they belong. 14. Export the update sets to XML. 15. Import them as 'Retrieved update sets'. 16. Run the preview on the retrieved update sets. Notice that there are errors such as, 'Cannot commit Update Set 'X' because: Update scope id 'A' is different than update set scope id 'B'. Resolve the problem before committing.' {#brazil-security-notables__ol_cr3_dsj_lkc} Expected behavior: The user should be able to move the update sets between environments without errors. Actual behavior: The user cannot successfully move the update sets between environments due to errors. |
| Password2 Encryption PRB2015257 [KB2978056](https://hi.service-now.com/kb_view.do?sysparm_article=KB2978056) | There's excessive growth on the sys_rollback_incremental table and higher binlog generation due to 'Mass Encryption Job' | This causes a large increase in the disk space on the database server. | Refer to the listed KB article for details. |
| Password Reset PRB2011602 | There are localization and text alignment issues on the password reset pages | These issues occur on the password reset identify, verify, success, confirmation, and reset pages. | 1. Provision an instance with any language plugin installed. 2. On the login page, switch to the foreign language. {#brazil-security-notables__ol_cs3_dsj_lkc} Observe that there are some text alignment and localization-related issues on the password reset identify, verify, success, confirmation, and reset pages. |
| PDF Generation PRB1967954 [KB2685208](https://hi.service-now.com/kb_view.do?sysparm_article=KB2685208) | PDF export from workspace isn't working for some related lists | The approver data isn't in PDFs exported from a record. | Refer to the listed KB article for details. |
| Performance Analytics PRB2050693 | injectWidgetContent re-executes already-loaded scripts via document.body.appendChild, causing a widget regression | injectWidgetContent in canvasUtils.js strips all \<script src\> tags from the widget HTML and re-injects them via document.body.appendChild. For scripts already loaded at page render time via Jelly \<g:requires\>, this causes re-execution, which corrupts initialized state and breaks widget functionality. |   |
| Performance Telemetry PRB2003266 [KB2897634](https://hi.service-now.com/kb_view.do?sysparm_article=KB2897634) | Upgrade from Australia RTP to a later Australia release fails | The instance becomes stuck when upgrading from an Australia release to another Australia release (for example, RTP to EA). However, instances can upgrade from outside of Australia into Australia successfully (for example, Zurich to Australia). | Refer to the listed KB article for details. |
| Platform Analytics Component API PRB1984668 | There's a column filter issue in the Data Visualization library page, in which the 'Does Not contain' isn't working on the 'Owner' column | Applying the 'Does not contain' filter on the 'Owned by' column does not filter the records properly. | 1. Navigate to the Data visualization library page. 2. Apply the 'Does not contain' filter on the 'Owned by' column. {#brazil-security-notables__ol_gs3_dsj_lkc} Expected behavior: All the records should be filtered by the applied filter value. Actual behavior: It is not filtered properly when there are multiple values. |
| Platform Analytics Component API PRB1996045 | The 'Dashboard' view count isn't updating for Core UI dashboards when the execution time is 0ms | The job report 'View events' process appears to failing due to an undefined string being passed to it. There are errors after upgrading to Zurich. |   |
| Platform Analytics Component API PRB2021236 | In an instance migrated to Australia, reports display Name = None for non-global domains | When a instance with core UI reports is migrated to Australia, any reports that aren't in the global domain don't have the name set. |   |
| Platform Analytics Component API PRB2037528 | In Australia, data visualizations created by non-admin users aren't visible by that user on the 'Overview' page under Quick Access \> Created by me |   | 1. On an Australia instance, impersonate a non-admin user. 2. Navigate to Platform AnalyticsData VisualizationsLibrary. 3. Select Create data visualization to create a data visualization (any type, any data source). 4. Navigate to Platform AnalyticsData VisualizationsLibraryOverview. 5. Under 'Quick Access', select Created by Me. Observe that the data visualization doesn't appear. 6. Repeat the same as an admin user. Note that the visualization does appear. {#brazil-security-notables__ol_ar3_dsj_lkc} |
| Platform Analytics Dashboard API PRB1843154 | Not able to save a dashboard after editing |   |   |
| Platform Analytics Dashboard API PRB1988004 | Platform analytics displays an incorrect view for the most recently viewed dashboards | The Recent Dashboards list includes dashboards that were not previously accessed. While actively using the instance, the list appears to update as the user opens certain dashboards. However, after logging out and logging back in, the Recent Dashboards list resets and once again displays dashboards that haven't been used. | 1. Open a base instance. 2. Navigate to AllPlatform AnalyticsLibraryDashboards. 3. Open any dashboard. 4. Select the arrow to view the Recent Dashboards list. If this is the first login of the day, observe that the list contains dashboards that may not have been previously accessed. 5. Switch between several dashboards. Observe that the Recent Dashboards list updates to reflect the dashboards opened during the session. 6. Log out of the instance. 7. Log back in using a new browser tab. {#brazil-security-notables__ol_jt3_dsj_lkc} Observe that the Recent Dashboards list resets and displays a different, seemingly random list of dashboards instead of the ones previously accessed. |
| Platform Analytics Dashboard API PRB1993476 [KB2961192](https://hi.service-now.com/kb_view.do?sysparm_article=KB2961192) | sys_translated records are deleted unexpectedly when updating a tab name on a dashboard in Japanese | sys_translated records are deleted from the sys_translated table unexpectedly. | Refer to the listed KB article for details. |
| Platform Analytics Dashboard API PRB1998900 [KB3060060](https://hi.service-now.com/kb_view.do?sysparm_article=KB3060060) | Tab name translations find an incorrect translation value | Tab names may not be translated correctly in the Next Experience dashboard. | Refer to the listed KB article for details. |
| Platform Analytics Dashboard API PRB2000628 | DashboardWidgetDao.update() does not persist widget_props field | When updating a dashboard widget record via DashboardWidgetDao.update(), the widget_props field is not written to the par_dashboard_widget table. The create() method correctly calls gr.setValue(WIDGET_PROPS, widget.getWidgetProps()), but the update() method is missing this call. This causes widget-level property overrides (for example, followFilters, header color, header title) to be saved on initial widget creation but silently lost on any subsequent dashboard save. |   |
| Platform Analytics Dashboard API PRB2014857 | Navigation to home.do doesn't redirect to the last visited CoreUI dashboard | An empty 'com.​snc.​par.​dashboards.​ui.​preferences' user preference causes incorrect redirection to the CoreUI dashboard. |   |
| Platform Analytics Dashboard API PRB2018222 | The last visited dashboard isn't restored when the user selects the homepage logo | When selecting the top-left logo to return to the homepage, users are consistently redirected to the ITOM Licensing Dashboard instead of the last visited dashboard. |   |
| Platform Analytics Dashboard API PRB2025067 [KB3092785](https://hi.service-now.com/kb_view.do?sysparm_article=KB3092785) | The sys_translated record for par_dashboard_tab is overwritten | This can cause translations to be lost. | Refer to the listed KB article for details. |
| Platform Analytics Dashboard API PRB2033980 [KB3129184](https://hi.service-now.com/kb_view.do?sysparm_article=KB3129184) | Text index processing delay on analytics_​visualization(column=​type)​ after upgrading to Australia | After upgrading to Australia, the user observed increased processing times related to text indexing events on the 'type' column of the analytics_visualization table. This results in a backlog of index events. | Refer to the listed KB article for details. |
| Platform Analytics Dashboard API PRB2050123 [KB3131331](https://hi.service-now.com/kb_view.do?sysparm_article=KB3131331) | GlideClearDashboardCache is undefined in Australia, causing 4 business rules (BR) to fail on every Platform Analytics (PA) dashboard save and widget loss and save failures | The Java class GlideClearDashboardCache (com.snc.par. dashboards.glide.script. ClearDashboardCache, annotated @GlideScriptable) isn't registered in the Rhino scripting scope. The class is present in the com.snc.par.dashboards OSGi bundle JAR, but isn't accessible as a Rhino scriptable --- typeof GlideClearDashboardCache returns undefined. Four business rules in com.snc.par.dashboards call this class with no try/catch on every INSERT, UPDATE, and DELETE against par_dashboard, par_dashboard_canvas, par_dashboard_widget, and par_dashboard_permission. When a user saves a PA dashboard, these BRs throw RhinoEcmaError: 'GlideClearDashboardCache' isn't defined (logged as WARNING in the node log, firing 14+ times per transaction). Two failure modes: (1) dashboard save fails with 'Your dashboard could not be saved', or (2) save succeeds but in-memory cache not flushed --- stale canvas layouts cause widgets to disappear from tabs on subsequent loads. |   |
| Platform Analytics Migration API PRB1972851 | Hide the info message if 'com.​glide.​par.​coreui_​single_​migration.​enabled' property is 'false' |   | 1. Create CoreUI dashboard (pa_dashboards). 2. Add Dynamic content block to it. 3. Set 'com.glide.par.coreui_single_migration.enabled' system property to 'false.' {#brazil-security-notables__ol_mr3_dsj_lkc} Expected behavior: The info message should be hidden Actual behavior: The info message is shown. |
| Platform Analytics Migration API PRB2031469 | The automatically triggered Core UI dashboard migration can cause an out of memory error and instance outages | After an Australia upgrade, the Core UI dashboard migration is triggered when a user loads the dashboard and the 'Do not migrate in bulk' (no_bulk_migration) field is set to false. The field default value is false, so any dashboard that isn't migrated is triggered to migrate when it's viewed. |   |
| Platform Runtime PRB1995562 | Session lock leak when the SSL connection closes during async transaction processing | When an SSL/TLS connection closes while Tomcat is reading POST body parameters for an /xmlhttp.do request, Tomcat's Request.parseParameters() silently catches the IOException. The transaction is created and queued with a dead connection. When worker threads attempt to claim the transaction, response.isCommitted() throws IllegalStateException (response recycled), causing a cancellation. All subsequent transactions for the same session fail identically, leaving the session blocked until it times out (for example, after 6 hours). Instead, dead connections should be detected before transaction creation, or failed claims should invalidate the corrupt session to unblock subsequent transactions. |   |
| Playbooks (Family Channel) PRB1999600 | Playbook with questionnaire activity is not activated by default in Yokohama instances | When apps are uploaded from Nexus or from a zip file, and they contain playbooks with questionnaire activities, those playbooks are missing trigger data. When a playbook has a questionnaire activity, a line gets added to the XML that causes everything after that line to fail to load. |   |
| Playbooks (Family Channel) PRB2009677 | The complex object's format is different for playbook output/input | The flow gives an 'com.snc.process_ flow.exception. ProcessAutomationException: Could not serialize value' error when running playbook. |   |
| Predictive Intelligence PRB1793351 | Security restricted for the script include 'GlideEntitlementAPI' from the scope 'Predictive Intelligence for Flow Designer' | The user is utilizing Prediction Intelligence within a the flow 'Predictive Int. for INC - Service v2'. On testing the flow, the prediction message shows, '404: Prediction Failed with error: java.​lang.​Null​Pointer​Exception:​ Cannot invoke 'java.​lang.​Boolean.​boolean​Value()​' because 'o' is null. Please contact Support for Additional Assistance.'. |   |
| Problem Management PRB2018009 [KB2985638](https://hi.service-now.com/kb_view.do?sysparm_article=KB2985638) | An ACL is reverted to true after an upgrade |   | Refer to the listed KB article for details. |
| Project Management PRB1980002 | There's an report_view ACL error for a few widgets |   | Open Execution DashboardData Quality tab in Strategic Planning workspace. Observe a report_view ACL error for the 'No Planned Cost' and 'No Planned benefit' widgets. |
| Related Lists PRB2000158 [KB2823064](https://hi.service-now.com/kb_view.do?sysparm_article=KB2823064) | Related lists do not show row data | Related lists do not show row data in list cells \[Core UI\]. | Refer to the listed KB article for details. |
| Related Lists PRB2025356 [KB3032264](https://hi.service-now.com/kb_view.do?sysparm_article=KB3032264) | User can't add records in a related list because of the strict ACL check and missing ACLs for required roles | Users with missing ACLs are not able to add new records in the related list due to a strict ACL check. | Refer to the listed KB article for details. |
| Request Management PRB1973824 [KB2815909](https://hi.service-now.com/kb_view.do?sysparm_article=KB2815909) | Added approvers names don't appear on the Approver list of Request and RITM | When adding approvers to a Request (REQ) or Requested Item (RITM) via the Multi-Row Add (MRA) component in the Related Records section of Service Operations Workspace (SOW), a success message is displayed confirming that the approvers have been added. However, the Approver list doesn't display the newly added approver names. Similarly, when attempting to add approvers from the UI16 related list, the approvers aren't added. | Refer to the listed KB article for details. |
| Resource Management PRB1925690 | An influx of events are generated 'resource_daily_hours.changed' | Whenever updates are happening on the 'resource_plan' table via any job, an influx of 'resource_daily _hours.changed' events are generated, and it's impacting the events processing in the default queue. | UPDATE the resource_plan table. See an influx of 'resource_daily _hours.changed' events generated. |
| Resource Management PRB2003945 | Cost plan breakdowns are duplicated | When the user changes the start date and end date from a resource plan, the business rule (BR) Update​Cost​Plan​Associated​To​Resource​Plan launches an event. The BR 'Recreate Requested Allocations' is also launched, updating the resource plan again and changing the planned cost. In summary, when the user updates the dates, the system updates the resource plan twice, one time for the dates and another for the planned cost, practically at the same time. Both changes trigger the BR Update​Cost​Plan​Associated​To​Resource​Plan and two events are created. Since there are two events in the system, they will try to perform the same action, and this could lead to problem concurrency. The two events are processed at the same time and the cost plan breakdowns are created twice. | 1. Navigate to pm_project.list. 2. Open the project where the duplicated cost plan breakdowns were created. {#brazil-security-notables__ol_yr3_dsj_lkc} |
| REST API Framework PRB2003629 [KB2934340](https://hi.service-now.com/kb_view.do?sysparm_article=KB2934340) | The user is unable to accurately track response size (egress data) for inbound API calls made by integrations | This issue was observed in production instances on Yokohama or Zurich. The user cannot determine if their usage is accurate for API Access Volume and Workflow Data Fabric usage when using the Integration Hub Usage Dashboard and Workflow Data Fabric Usage Dashboard. | Refer to the listed KB article for details. |
| Roles PRB2001499 | There's a role sys_id mismatch as a masking configuration is using glide_list |   | Create a masking configuration with the itil role. When the masking configuration is installed in a previous instance, there's a sys_id mismatch of the itil role in the instance and the shipped configuration. |
| Roles PRB2023810 | Instances without explicit roles throw an error when invoking agents with a 'Nobody' role mask | The following error appears in the logs: 'Role 'snc_external' not found. Cannot be automatically created: no thrown error'. | 1. Open an instance that doesn't have the explicit roles plugin. 2. Trigger an AI Agent that has a role mask on the Nobody field. {#brazil-security-notables__ol_as3_dsj_lkc} Observe the error in the logs: 'Role 'snc_external' not found. Cannot be automatically created: no thrown error'. |
| Scheduled Jobs PRB2031347 | Scheduled templates loop an excessive amount of times on due to a UTC midnight boundary issue with 'Week in Month' scheduling in a UTC+ timezone | When the first Monday coincides with the first day of the month, the scheduler triggers the job multiple times until 12:00 AM GMT, resulting in duplicate executions. |   |
| Scripting Governance Tool PRB1967275 | Unable to remove the 'snc_​required_​script_​writer_​permission' role from users in a domain separated instance |   |   |
| Scripting Governance Tool PRB2013370 | There's a unique constraint error when assigning roles/groups containing snc_required_ script_writer_permission | When assigning roles or groups that include the snc_​required_​script_​writer_​permission role (directly or indirectly), the system throws a unique constraint error. This occurs when auto-provisioning in Scripting Governance is turned on. |   |
| Security Data Filters PRB1967733 | A security data filter (SDF) is applied redundantly via dotwalk paths, causing missing records in 'OR' queries | This has two distinct symptoms caused by the same underlying duplication. One, when querying a parent table with 'OR' conditions dotwalking into multiple child tables simultaneously, the parent SDF was applied three times --- once directly and once per dotwalk CE path --- producing conflicting conditions that returned 0 records instead of the expected results. Two, when querying a table with a field-based SDF, records where that field was empty/null were incorrectly excluded. This was caused by the same SDF being applied redundantly via a dotwalk CE, which caused the combined filter condition to exclude null matches. |   |
| Seismic Framework PRB1972265 | Ancestor path retains the parent element using hard references and can make small memory leaks larger, depending on retention | In some cases, the retainer is the variable ANCESTOR_PATH, as it holds on to hard references to the ancestor elements. Since elements in the ancestor path are retained, it may make a small leak larger if the elements themselves are large in nature (lists, forms, client state data brokers, etc.). |   |
| Server-side scripts PRB1994381 [KB3006010](https://hi.service-now.com/kb_view.do?sysparm_article=KB3006010) | Discovery has issues on some node after upgrading in Australia | After upgrading to Australia, JavaScript running in app nodes fails to call Java functions. The following warning appears: '\*\*\* WARNING \*\*\* Evaluator: com.​glide.​script.​Rhino​Ecma​Error:​ undefined is not a function.' This impacts various features, including Discovery and Event Management. | Refer to the listed KB article for details. |
| Server-side scripts PRB2022176 | The script name should be logged when a page title is unavailable in the 'Guarded Scripts' list entry | The page title can be empty in some cases, such as a scheduled job and probably more. It should become the script name if there isn't a page name that makes sense. |   |
| Service Catalog Builder PRB2008409 [KB3116170](https://hi.service-now.com/kb_view.do?sysparm_article=KB3116170) | Label-type variables aren't available for selection in a UI policy action within Catalog Builder | A label-type variable isn't available for selection in UI policy actions within Catalog Builder, whereas the same label variable is available in UI policy actions in 'Maintain Items'. | Refer to the listed KB article for details. |
| Service Catalog Components PRB1999964 | Null/No entries for some of the questions in selected items MRVS breaks the case record page (platform and workplace central) | A workplace case form \[UI16\] breaks when entries in sc_multi_row_question_answer are missing for one or more questions for selected items. |   |
| Service Catalog Portal Widgets PRB2018000 | Performance issues with the Employee Center Standard Ticket Page Widget | This issue was observed in Australia, but the function works as expected in Zurich. This impacts the Service Portal 'Standard Ticket Header Widget.' The user observed that the RITM 'Show details' drop-down list alignment is off, and the REQ 'Show/Hide Details' drop-down list button option is shown even if there are no additional details to show. | 1. Open the Employee Center Portal (ESC). 2. Submit a Request. On the standard ticket page, observe that the Show/Hide Details button is shown even if there are no additional details to show. 3. On the 'Requested items' tab, select on RITM number. Notice that it will redirect to the standard ticket page for the RITM. {#brazil-security-notables__ol_fr3_dsj_lkc} Expected behavior: The RITM alignment is aligned without padding-left at 0px. Actual behavior: The RITMShow details button alignment is off, and the REQ Show/Hide Details drop-down list button option is shown even if there are no additional details to show. |
| Service Catalog Portal Widgets PRB2029227 | Service Portal glide.​ui.​activity_​stream.​style.​comments has a visual error after upgrading to Australia | When the sys_property 'glide.​ui.​activity_​stream.​style.​comments' is set to any color, the bar becomes taller than the parent element, making it overflow. | 1. Open an Australia instance. 2. Change the sys_property 'glide.ui.activity_stream.style.comments' from transparent to any color. 3. Navigate to the Service Portal. 4. Open any incident. {#brazil-security-notables__ol_uq3_dsj_lkc} Expected behavior: The comment section has a bar in the color that was chosen. It's the same size as theComment Input field. Actual behavior: The comment section has a bar in the color that was chosen, but it's taller than theComment Input field, making it overflow. |
| Service Catalog PRB1972924 | The Generate sequence UI action gives a missing start rule error on Playbook 28.2.1 | This issue was observed in Playbook 28.2.1, but not in 28.0.8. | 1. Open any order guide. 2. Generate the sequence. 3. Open the playbook created. {#brazil-security-notables__ol_wq3_dsj_lkc} Observe the missing start rule errors. |
| Service Mapping PRB1972871 | There's a memory impact by the query in 'Service Mapping - Traffic Process to Process' |   |   |
| Service Portal Core Widgets PRB1819286 | When updating the font-family in the EC theme, it doesn't update the font in the AI search results page | According to the 'Theming for AI Search in Service Portal' documentation, users can control the look and feel of AI search results. The user was attempting to update the default font family of the EC theme from Lato, Arial, sans-serif, to 'Segoe UI', sans-serif . When updating the EC theme CSS properties, this changed the font on the home page as expected, but failed to change font in the AI Search results page. Also, the faceted search widget doesn't change and was still using Lato, Arial, sans-serif. |   |
| Service Portal PRB1979009 [KB2817350](https://hi.service-now.com/kb_view.do?sysparm_article=KB2817350) | Catalog items' M2M category user criteria aren't considered in late binding | The Service Catalog is split by company, with some items viewable for some companies, and some for more than one. One form that should be visible to two companies doesn't display in the Service Portal search. The form is available for both companies and is in two categories. It can be seen in 'Services' by some users, but it doesn't appear in search results for the other company's users. | Refer to the listed KB article for details. |
| Service Portal PRB1999839 [KB2983856](https://hi.service-now.com/kb_view.do?sysparm_article=KB2983856) | When Multi-factor Authentication (MFA) and Password Needs Reset is true, the password reset workflow refreshes after selecting Submit on the initial login and redirects to the backend Platform UI | When MFA is configured on an instance and Password Needs Reset is set to true on a vendor contact record, they are presented with a screen to change their password on initial login. After changing the password on the initial screen and selecting submit, the page refreshes back to the same password reset screen. If they perform the same steps again and select submit, they are finally redirected but the redirect is incorrect and redirects the user to the backend UI. | Refer to the listed KB article for details. |
| Service Portal PRB2006596 | Tooltips of Cart and Tours are not hoverable | Pointer hover over the Cart button triggers the tooltip, but when the pointer is moved over the tooltip, the tooltip disappears. |   |
| Service Portfolio Management PRB2029361 | The 'Outage calculation' business rule is not working when the date format is set to DD/MM/YYYY | The Duration field is not calculating correctly because the 'Outage Calculation' business rule does not work when the date format is set to DD/MM/YYYY. |   |
| Session Management PRB1950133 | The guest user's language isn't displayed on the log in page in Zurich | After setting the 'guest' user language to Japanese, the log in page should be displayed in Japanese but is displayed in English. |   |
| Sidebar (Family Release) PRB1996759 | Null check for threadMember is incomplete for CollabMessageDto | The user can send a message but it's greyed out in the chat window until the user refreshes. The last sent message in a collab chat record doesn't update, so the discussion card in the utility menu never updates. |   |
| Software Asset Management Plugin Framework PRB1788390 | Software Asset Management (SAM) Discovery Model to Software Model matching fails when Discovery Models are corrupted | The job should not fail because of the few corrupted discovery records, and should handle the corrupted records and finish processing other software models and discovery models. |   |
| Software Asset Management PRB2018383 [KB2986694](https://hi.service-now.com/kb_view.do?sysparm_article=KB2986694) | A Microsoft per‑core license metric isn't visible after a Zurich or Australia upgrade | The MS per core metric was moved from the apply_once folder to the update folder. The fix script to set the metric group was overwritten, since the update folder file insert ran after. Thus, the MS per core uploaded with no metric group. | Refer to the listed KB article for details. |
| Standard Ticket Page PRB2000629 [KB3153782](https://hi.service-now.com/kb_view.do?sysparm_article=KB3153782) | There's issues when sending a reply to a ticket from Service Portal | When the user sends a reply in the Service Portal via widget, the text field isn't cleared after the user selects the Post option. | Refer to the listed KB article for details. |
| System Archiving PRB1890304 | Users can't uninstall a custom or store application with archive records (sys_archive) | A user with admin rights can't uninstall the custom or store app because the uninstall can't delete the sys_archive records. | 1. Create a custom app (or use a store app). 2. Enable data archiving for a table in the app. 3. Ensure that there are multiple archive runs moving data from the table to the archive table ar_table. 4. Try to uninstall the custom or store app. {#brazil-security-notables__ol_zr3_dsj_lkc} Observe that a user with admin rights can't uninstall the app. The uninstall can't delete the sys_archive records until a workaround is applied. |
| System Events PRB1969068 | The 'Events process 0' job yields to memory pressure, causing event processing delays | When node memory pressure is high (live set ≥ \~91%), the JobYieldCheck mechanism triggers a yield on events process 0 despite it being a priority 25 (high priority) job. High-priority jobs should not be subject to automatic yield throttling, as this directly delays critical event processing and can result in P1 incidents. The memory pressure itself may be transient or difficult to diagnose quickly --- heap dumps often show no obvious culprit, and identifying the root cause of elevated memory usage takes time. During that window, events process 0 is repeatedly yielded, stalling event processing pipelines that users depend on for time-sensitive operations. JobYieldCheck WARNING Job=events process 0 yields due to memory pressure logged on affected nodes. Node memory is sustained at 91--93% of max, with live set at \~91.44% (\~1.28GB). glide.memory.watcher logs no active transaction warnings alongside persistent memory pressure status = true. There's only a single job visible in the queue during the yield window, yet throttling still triggers. However, users expect priority 25 jobs (events process 0) should not be yielded under memory pressure conditions. Yield throttling should be restricted to lower-priority workloads. |   |
| System Events PRB2003217 | Fix behavior of event processing tables during the clone operation and clean up invalid records/jobs during the clean up script | During cloning on Zurich instances, events processing framework tables' configuration aren't preserved, causing errors in transaction logs due to orphan records for events jobs. An orphan record occurs when a sys_trigger record exists for an event processing job, but the corresponding entry in the sys_processing_framework_job table is missing. This causes the ProcessingFrameworkJob to fail when attempting to retrieve the scheduled job context. Log example: 'ProcessingFrameworkJob SEVERE ProcessingFramework \> Failed to get the schedule job context'. |   |
| System Events PRB2003586 | A database (DB) CPU spikes to 76% due to a slow sysevent 'UNION ALL' query on flow.fire events triggered by an SLA breach processing at 14k incidents/hr | During a combined load test generating 14,000 incidents/hr (7k/hr via Event Management + 7k/hr via ITSM SOW), the DB host CPU spiked sharply to 76% at approximately 00:30--00:45 UTC on 2026-03-17. The spike is correlated with a high-frequency, slow-executing SQL query scanning all sysevent partition tables (sysevent0000--sysevent0006) via a 7-way 'UNION ALL', issued by the Flow Engine's MonitorOperation while polling for SLA breach flow events. |   |
| System Export Sets PRB1835154 | Improve retry logic in POST API from MID server LES Consumer to Customer REST endpoint | Currently, the infinite retry doesn't work for different status codes. This needs to be modified (for example, to support 201 and 204). |   |
| Table Administration and Data Management PRB2032949 | Shadow table alter failing and retrying in loop | 'Fix Shadow Table Schema' job triggers alter on shadow tables fail and retry in a loop. |   |
| Table Cleaner PRB1821147 [KB2480543](https://hi.service-now.com/kb_view.do?sysparm_article=KB2480543) | Archive Destroy Log\[sys_archive_destroy_log\] table cleanup doesn't work as the table cleaner rule is disabled by default | The table cleaner rule for sys_archive_destroy_log table is disabled by default in an instance. For instances that have entries in sys_archive_destroy_log, cleanup doesn't work as this table cleaner is disabled. | Refer to the listed KB article for details. |
| Table Cleaner PRB2001569 | Long running queries from com.​glide.​dm_​job.​table_​cleaner.​Table​Cleaner​Producer cause significant DB CPU spikes on Raptor DB Pro instances | The HexCleanerProducerValidator lacks a guard against dot-walk conditions. Combined with recursive count-estimation logic and unbounded MIN(sys_id) aggregates, this leads to the creation of aggregate queries on massive tables. |   |
| Table Rotation PRB1954428 [KB2590667](https://hi.service-now.com/kb_view.do?sysparm_article=KB2590667) | Table rotation creates too many 'Online Alter Truncate Delayed Drop Table' entires in sys_trigger to be executed in a short span of time | The syslog and extended tables are supposed to be rotated weekly, which means it switches to the next rotation in the schedule and also truncates future rotation to make it available for the next week. | Refer to the listed KB article for details. |
| Tables and Columns Data Dictionary PRB1773296 | For a DocumentID type field, there's no option to specify reference_cascade_rule | Cascade delete doesn't work for DocumentID type fields the same way it works for the reference fields. |   |
| Tags PRB2039548 | In Australia, tags aren't saved for 'active = false' records for non-admin users |   |   |
| Time Card Management PRB1988000 [KB2760220](https://hi.service-now.com/kb_view.do?sysparm_article=KB2760220) | Managers are no longer able to add time cards for their direct reports and delegates in the Time Sheet Portal |   | Refer to the listed KB article for details. |
| Time Card Management PRB2051508 [KB3139332](https://hi.service-now.com/kb_view.do?sysparm_article=KB3139332) | The user.manager field shows as empty when opening the 'Pending Approval' module for Time sheets | The filter is emplty for the user.manager field. | 1. Impersonate a user with submitted time sheets. 2. Navigate to Time SheetPending Approval. {#brazil-security-notables__ol_mq3_dsj_lkc} Notice that the filter shows empty for User.Manager. |
| Time-Limited User Roles PRB1972197 | When a user is logged in, updating an existing record with a new end time in the 'Time limited user roles' table causes never ending information messages on all pages |   | 1. Open a Zurich instance. 2. In a separate browser or incognito window, log in with a user that has an 'itil' role. 3. In another window, log in with a user who has an 'admin' role. 4. With the admin user, navigate to AllUser administrationTime-limited roles. 5. Create a record that grants an 'admin' role to the user. 6. With the user that had only an 'itil' role but received the 'Time limited admin' role, open an incident list and then a record. {#brazil-security-notables__ol_jr3_dsj_lkc} Expected behavior: Users see an information message once. Actual behavior: Users see a message about roles that are granted or removed, but closing them isn't helping. |
| Transaction Management PRB2031636 [KB3141646](https://hi.service-now.com/kb_view.do?sysparm_article=KB3141646) | When a semaphore is loaded via plugin extension point, the queue depth limit is set wrong and the semaphore's load_stats saturation value will always report 1 instead of the correct value | The saturation value should not always be one because saturation should reflect the amount of work queued in CsHybridQueue. | Refer to the listed KB article for details. |
| UI Actions PRB1995906 | The dependent field is updated by a flow that appears blank in workspace | Confirmation on the task - CSTASK1336675 This issue could be intermittent, needs to be replicated thoroughly. | 1. Create a UI Action in a table which has a dependent field (for example, State and Sub State). 2. Make sure the UI Action sets the 'State' and 'Sub State' values when selected. 3. Create two flows that trigger when the record is updated. * Flow one is triggered when the 'State' value is changed by the UI Action. It also changes the state. * Flow two is triggered when the 'State' value is changed by flow one. {#brazil-security-notables__ul_ps3_dsj_lkc} 4. Open the record on which the UI Action and flows are created. 5. Select the UI Action. {#brazil-security-notables__ol_os3_dsj_lkc} Observe that the Sub State field is empty in workspace. |
| UI Field Administration PRB1926469 | The contrast ratio of the focus indicator on the search suggestion item of the combo box is less than 3:1 |   | 1. Open any instance. 2. Navigate to AllIncidentAllNew. 3. Navigate to the 'Caller' combo box and type in it. 4. When the search results appear, navigate to them. 5. Verify the contrast ratio of the focus indicator. {#brazil-security-notables__ol_nt3_dsj_lkc} Expected behavior: The contrast ratio of the focus indicator on the search suggestion item of the combo box should be equal to or greater than 3:1. Actual behavior: The contrast ratio of the focus indicator on the search suggestion item of the combo box is less than 3:1. |
| UI Field Administration PRB1962435 | There's an incident form load issue due to the missing macro sn_wwna_nacm_component, which causes a performance issue | When loading an incident form, the local host log is consistently flooded with the 'DBMacro WARNING \*\*\* WARNING \*\*\* Macro missing: sn_wwna_nacm_component', and this is causing the form to load slowly. | 1. Open any incident record in the instance. 2. Navigate to System DiagnosticsSession DebugEnable All. {#brazil-security-notables__ol_vr3_dsj_lkc} Observe the error in the localhost log, users notice the warning called many times: 'DBMacro WARNING \*\*\* WARNING \*\*\* Macro missing: sn_wwna_nacm_component'. |
| UI Field Administration PRB1969665 | Currency values change automatically in workspaces | The currency value changes automatically when selecting in and out of the Currency field, without actually changing the value. | 1. Open any record from incident.list. 2. Select View - Service Operations Workspace. 3. Create a field type 'price'. 4. Give it any name and any value. 5. Save the record. 6. Open sys_user table for the name 'Beth Anglin' who has 'ITIL' role. 7. Add a County Code field with the value set to 'system(US)'. 8. Impersonate the user Beth Anglin. 9. Open Service Operations Workspace. 10. Select into the Price field under the 'Details' tab. 11. Without changing anything, select out of the field. Notice that the value doesn't change. 12. End the impersonation. 13. Update the County Code field to 'Germany' or any other country for the user Beth Anglin. 14. Impersonate the user Beth Anglin again. 15. Open Service Operations Workspace. 16. Select into the Price field under the 'Details' tab. 17. Without changing anything, select out of the field again. {#brazil-security-notables__ol_er3_dsj_lkc} Observe that the value changes. |
| UI Field Administration PRB1998819 | WWNAglobal utils should be removed |   |   |
| UI Form Administration PRB1825264 | A cursor jumps in the subject line when composing an email in Workspace | There's an issue with the cursor jumping to the end of the line while writing/editing the subject line when composing an email in an Workspace. The cursor jumps when editing the subject line and not the the body of the email. | 1. Log in to any instance. 2. Navigate to Customer Service Management (CSM) Configurable Workspace. 3. Open any case. 4. Select Compose Email. 5. Select the Subject field. {#brazil-security-notables__ol_gt3_dsj_lkc} See that the cursor jumps randomly to the end of the subject field. |
| UI Form Administration PRB1971299 | When leaving an unsaved task, the pop-up modal shows the incorrect component name | When the user access a UI16 form from a dashboard page, then leaves the form without saving changes, a confirmation modal is displayed. The first letter of the 'component or element' is trimmed in the modal. | 1. Log in to an instance. 2. Navigate to a dashboard that has a data visualization component. 3. Access the component. 4. Navigate to the form record. 5. Make some changes in the form, but don't save it. 6. Select the Backbutton on the form (not the browser Back button). {#brazil-security-notables__ol_ls3_dsj_lkc} Expected behavior: A confirmation modal is displayed with the text: 'Do you want to save changes to Critical Task assigned before leaving this page? Your changes will be lost if you leave now.' Actual behavior: A confirmation modal is displayed with the text: 'Do you want to save changes to ritical Task assigned before leaving this page? Your changes will be lost if you leave now.'. |
| UI Form Administration PRB1993929 [KB2908761](https://hi.service-now.com/kb_view.do?sysparm_article=KB2908761) | RCAs are created with the source as 'sys_ws_operation.do? sys_​id=​6986d96dff7322102ae8ffffffffff48' for HR apps | An RCA is generated: 'RCA triggered - 'Read operation on table 'sn_doc_html_template' from scope 'Global' was denied. The application 'Document Templates' must declare a Restricted Caller Access privilege. Please contact the application admin to update their access requests'. None should be generated. |   |
| UI Form Administration PRB1998771 [KB2898934](https://hi.service-now.com/kb_view.do?sysparm_article=KB2898934) | Installing the com.glide.ai_record_activity plugin doesn't create the sys_ai_record_activity table, causing NullPointerException errors | The user observes errors getting records for sys_ai_record_activity: java.​lang.​Null​Pointer​Exception.​ | Refer to the listed KB article for details. |
| UI Form Administration PRB2006958 | Introduce system property to hide form level TI banner | The alert appears when the form is loaded. There's no way to avoid seeing the alert if not required. | 1. Open a SOW record with Task Intelligence field level recommendations. Notice that the form level banner appears with deep links to fields that have recommendations. 2. Cancel the alert. 3. Load the form. {#brazil-security-notables__ol_yq3_dsj_lkc} Observe that the alert appears again. |
| UI Form Administration PRB2019275 | There's layout and scrollbar flickering when entering info, internal and external, in HTML Journal fields | There's layout and scrollbar flickering when entering info, internal and external, in HTML Journal fields, caused by automatic browser window resizing. The issue occurs randomly and is not related to a specific case or text size. | 1. Change the glide.ui.journal.use_html system property to true. 2. Open any incident in any workspace. 3. Type multiple lines in internal info or copy/paste some text until the scroll bar appears. 4. Remove enough lines so that it's one new line away from displaying the scroll bar. 5. Type some words randomly to add enough words to create a new line. {#brazil-security-notables__ol_kt3_dsj_lkc} Observe the flickering issue. |
| UI Form Administration PRB2020457 | There's a false error for a strict read-only 'Currency' column when the numeric value is 1000 or larger | Additional formatting like commas or decimals are added to Currency fields on the client side form initialization, which makes the field appear as modified on update. This issue is present when: 1. a field of type currency is visible on a form, 2. The field has a read_​only_​option=​strict_​read_​only,​ and 3. The numeric value of a field is 4 digits or greater. | 1. On any table, create a field of the type Currency. 2. Create an on insert business rule to set the value of the field to USD: 1000. 3. Save the record. 4. Modify a different field on the form and save. {#brazil-security-notables__ol_rq3_dsj_lkc} Expected behavior: The record is updated without any error messages. Actual behavior: An error message stating updates to columns 'depreciated_amount' and 'residual' were ignored. |
| UI Form Administration PRB2023067 | The UI Section doesn't show the mandatory asterisk in UI16 | Sections that contain a mandatory field (set by the UI policy) should have an asterisk. |   |
| UI Form Administration PRB2033143 [KB3139369](https://hi.service-now.com/kb_view.do?sysparm_article=KB3139369) | The 'Preview this record' icon isn't working in the Safari browser | Selects on the button components and controls aren't working in Safari for UI16. This issue is only reproducible in the Safari browser. Non-Safari browsers aren't impacted and they don't face this issue. | Refer to the listed KB article for details. |
| Upgrade Center PRB1889947 | Instance nodes do not appear and this error appears: javax.​crypto.​AEADBad​Tag​Exception:​ Error finalising cipher data: mac check in GCM failed | Instance JVMs won't start after the error, ' java.io.IOException: javax.​crypto.​AEADBad​Tag​Exception:​ Error finalising cipher data: mac check in GCM failed'. |   |
| Upgrade Center PRB1950446 | The 'Flow Designer' module directs to 'Page Not Found' after an instance upgrade on some nodes | The Process Automation \> Flow Designer module redirects to 'Page Not Found' on some nodes after an instance upgrade. The main issue is that nodes tried to download app packages from Store, but Store responded with a 400 error because the platform version for the instance isn't updated on the Store end yet, and the request is considered incompatible. However, during an upgrade, it shouldn't request app packages from Store. |   |
| Upgrade Center PRB2016580 | After upgrading instances from Zurich to Australia, several records show up on the skipped list belonging to the sn_glider or sn_build_agent with error 'Unable to compare, unable to find a current record' | After upgrading a Zurich instance to Australia the upgrade monitor will have a list of skipped records. But when trying to resolved issue, users observe the error: 'Unable to compare, unable to find a current record' when trying to compare to current. | Refer to the listed KB article for details. |
| Upgrade Center PRB2023239 [KB3015307](https://hi.service-now.com/kb_view.do?sysparm_article=KB3015307) | There is a mismatch in the Glide version between the app node and the database following an upgrade | A new code path introduced the MariaDBI18NSQLFormatter class. When the sys_properties record of the 'com.glide.db.session _language_collation_feature' property is set to true, it takes a code path upon upgrade or restart where an instance will not come up. When 'com.glide.db.session _language_collation_feature' is false, the code path exits early and doesn't cause this issue. | Refer to the listed KB article for details. |
| UXF Macroponent PRB2009619 | Multiple stuck threads cause semaphore exhaustion, requiring a node restart | There's a stuck semaphore transaction related to the function create​Cacheable​Page​Fragment​From​Shell in Cacheable​Page​Fragment​Factory.​java.​ This can lead to multiple threads being stuck with no option but to restart the node to provide relief. |   |
| UX Framework PRB1966018 | On a slow network, sometimes the record details appear in the 'List' tab | The issue occurs if the user opens a record and quickly switches back to the list tab in CSM Configurable Workspace. | 1. Open any Zurich base instance. 2. Open CSM Configurable Workspace. 3. On a Google Chrome browser, select F12. 4. Navigate to Network tab3G Throttlingto simulate a slower network. 5. Navigate to 'Lists'. 6. Open any list, such as 'Problem records'. 7. Open a problem record so a new tab opens. 8. Quickly switch back to the 'Lists' tab. {#brazil-security-notables__ol_js3_dsj_lkc} Observe that the problem record details load in the 'Lists' tab. |
| UX Framework PRB1969085 | GraphQL schema changes for client-interaction.graphl in ux-metrics | The user sees error logs from the ClientMetricsRestService.java file. The error logs are logged to the syslog table. |   |
| UX Framework PRB1986291 [KB2956365](https://hi.service-now.com/kb_view.do?sysparm_article=KB2956365) | List dynamic routing shouldn't be applied when creating a record from a related list | Dynamic routing is handled within the recordRoutesMapping Client Script Include. Kb_knowledge mapping uses source_component: 'list' to route article selects to kb_view. When the New button is selected on a related list, the kb_view route is incorrectly applied. Since kb_view can't handle new records, the page breaks. | Refer to the listed KB article for details. |
| UX Framework PRB2002003 [KB2901692](https://hi.service-now.com/kb_view.do?sysparm_article=KB2901692) | Stuck semaphore due to the call Glide​Ux​Interoperable​Routes​Provider.​get​Interoperable​Routes​By​Ids()​ |   | Refer to the listed KB article for details. |
| UX Framework PRB2027095 [KB3102030](https://hi.service-now.com/kb_view.do?sysparm_article=KB3102030) | The latest component asset isn't selected when multiple asset associations exist in sys_​ux_​lib_​component_​m2m_​asset,​ which impacts AI summary cards on UI Builder workspaces | When the AI summary card component was upgraded, its asset name changed from now-ai-summary-card/index to uxc-generative-ai/index. The upgrade doesn't clean up the old asset association, so the sys_ux_lib_component_m2m_asset table ends up with two associations for the same component (old and new asset). The component-to-asset selection query in Glide​Ux​Component​Def​Provider.​get​Asset​Names​By​Component​Sys​Ids()​ had no ordering and relied on default DB ordering. When duplicate associations exist, this could return the stale now-ai-summary-card/index asset, which is incompatible with the latest Platform AI Agents and Skills app. As a result the AI summary card fails to load on UI Builder workspaces. Classic UI uses a different rendering path, so it is unaffected. | Refer to the listed KB article for details. |
| Virtual Agent Designer Legacy PRB1917696 | Virtual Agent Designer isn't displaying options for subflows if there are more than 100 spokes |   | 1. Log in to an instance with more than 100 spokes. 2. Navigate to Virtual agent designerOpen a new topic. 3. Add the 'Action' component to the designer. 4. Check the option 'subflows' for 'invoke flow designer object'. 5. In the 'Spokes' menu, select a spoke which is at the end of the list in the 'Spokes' table. 6. Select the subflow menu. {#brazil-security-notables__ol_hs3_dsj_lkc} Observe that there aren't any options. |
| Virtual Agent PRB1963467 | Variable is slot filled with SYSTEM_FILTERED | This issue occurs in any catalog item for a reference type question. When a user types an option that isn't present in the reference table, the variable is slot filled with SYSTEM_FILTERED in the summary card. |   |
| Virtual Agent PRB1975617 | Failing to send an agent joined message |   |   |
| Virtual Agent PRB1994599 | Off Glide code introduced an issue for DTAC when the agent sends a message to the requester | The dynamic translation for messages doesn't work when the agent sends messages to the requester. It throws NPE. |   |
| Virtual Agent PRB1997460 | For Now Assist conversations, interaction.transcript contains all the smartlinks rather than just the sources shown to the chat requester |   | 1. Set up an instance with Now Assist and AI Search. 2. Perform a search that returns multiple sources. 3. Close the conversation. {#brazil-security-notables__ol_mt3_dsj_lkc} Expected behavior: Interaction.transcript should show the sources that are displayed to the chat request. Actual behavior: Interaction.transcript shows all sources in the smartLinksData regardless of whether or not they are shown to the user. |
| Virtual Agent PRB1999010 [KB2817637](https://hi.service-now.com/kb_view.do?sysparm_article=KB2817637) | The scheduled job, 'Time out abandoned Virtual Agent (VA) conversation' closes the conversation | 'Time out abandoned VA conversation' should not close the conversation if the idle timeout is not completed. | Refer to the listed KB article for details. |
| Virtual Agent PRB2006856 [KB3003358](https://hi.service-now.com/kb_view.do?sysparm_article=KB3003358) | Serial number when conversation moves across nodes | Virtual Agent gets stuck. New messages are sent but the client doesn't render them until the page is reloaded. | Refer to the listed KB article for details. |
| Virtual Agent PRB2007255 [KB3045151](https://hi.service-now.com/kb_view.do?sysparm_article=KB3045151) | There's memory pressure on nodes due to high memory for the cache 'com.​glide.​cs.​qlue.​module.​coma.​Message​Batching​Session' | Users with 2GB nodes may encounter memory issues that can cause the events process jobs to yield. | Refer to the listed KB article for details. |
| Virtual Agent Web Client PRB1923955 | In an enhanced chat, the user can't view the RITM form in small screen | When the enhanced chat is in 90% modal and the user selects a link inside a card, the link opens in a new tab, but the VA remains in 90% modal. The enhanced chat should switch to floating mode when a link opens in a new tab. When the enhanced chat is in full-screen mode and a user selects any link inside the VA, the link also opens in a new tab. However, due to limited browser space, the enhanced chat remains in full-screen mode. | 1. Enable Enhanced Chat on portal. 2. Log in to a Yokohama instance. 3. Initiate a chat. 4. Submit a request. 5. Minimize the window so that only the chat window is visible on the screen. 6. Select the RITM number. {#brazil-security-notables__ol_xr3_dsj_lkc} Expected behavior: Once RITM is selected, the RITM details are visible. Actual behavior: The RITM details aren't visible. Only the chat window is visible. |
| Virtual Agent Web Client PRB1972561 [KB2787591](https://hi.service-now.com/kb_view.do?sysparm_article=KB2787591) | Enhanced chat does not pick up custom tokens in portal |   | Refer to the listed KB article for details. |
| Virtual Agent Web Client PRB1988834 | Custom icon on a menu item isn't displayed in the Conversational Panel (Enhanced Chat) | The icon configured for a menu item is not visible. This functionality previously worked in the standard chat experience, but it's no longer working in the enhanced chat. |   |
| Virtual Agent Web Client PRB2067082 | Enhanced Chat colors don't change when theming CSS variables are set as documented | The variables in the 'Theming for Now Assist in Virtual Agent enhanced chat' documentation should be followed. |   |
| Visual Task Boards PRB1994303 | In a Visual Task Board (VTB), the 'Select lane' menu displays lane values from all the boards available irrespective of the board selected to move |   |   |
| Walk-Up Experience PRB2039555 | The walk-up queue is not refreshing automatically after interaction closure | The walk-up 'Now Serving' queue does not automatically refresh when an interaction is moved to the 'Closed/Complete' state. The queue continues to display the user until the page is manually refreshed. |   |
| Window Manager PRB2019525 | When the Now Assist panel is activated, the left side navigation is hidden and the margin remains applied, leaving an empty space |   |   |
| Work Order Management PRB1960028 | AgentScheduleUtil script causes an 'Out of memory' issue for /​api/​now/​sg/​applet_​launcher/​feed | While processing the API 'api/​now/​sg/​applet_​launcher/​feed',​ there was an 'Out of memory' issue due to the script AgentScheduleUtil, leading to node restart. Based on the node logs, it seems to be a sudden spike that resulted in a restart. The issue is caused by an array holding more than 1Gb of data. |   |
[ ]

{#brazil-security-notables__notable-fixes}

## All Other Fixes {#brazil-security-notables__section_kkm_klc_zlb}

To view a list of all other PRBs fixed in Brazil, refer to [All other Brazil fixes](https://servicenow-prod.fluidtopics.net/5P7QisKr1Kh9T7I~_HBaMA "The Brazil release contains important problem fixes.").

*[\>]: and then